Beh deg0nz

LLM Wiki

A pattern for building personal knowledge bases using LLMs.

This is an idea file, it is designed to be copy pasted to your own LLM Agent (e.g. OpenAI Codex, Claude Code, OpenCode / Pi, or etc.). Its goal is to communicate the high level idea, but your agent will build out the specifics in collaboration with you.

The core idea

Most people's experience with LLMs and documents looks like RAG: you upload a collection of files, the LLM retrieves relevant chunks at query time, and generates an answer. This works, but the LLM is rediscovering knowledge from scratch on every question. There's no accumulation. Ask a subtle question that requires synthesizing five documents, and the LLM has to find and piece together the relevant fragments every time. Nothing is built up. NotebookLM, ChatGPT file uploads, and most RAG systems work this way.

KeePass Auto-Type on iTerm2/zsh/Tmux

This is a very quick tutorial on how to auto-type passwords from KeePassXC to a CLI application. The document is mostly for myself to remember how to do it, but feel free to add your comments and improvements.

Context

I use KeePassXC as my main password manager. About a couple of months ago I discovered I don't need to copy passwords from KeepassXC via clipboard. I found out about the Auto-Type feature in the KeepassXC User Guide. According to the user guide, Auto-Type "acts like a virtual keyboard to populate data from your entries directly into the corresponding websites or applications that you use".

This is great for websites since I don't need any browser plugin. Instead I just press CTRL-Option-A (in my case) and let the user and password fields be auto-completed using KeepassXC. in order to do this correctly, you can configure a Window-Association. This is usually the title of a website as f

Podman with docker-compose on MacOS.

Podman an alternative to Docker Desktop on MacOS

Getting podman installed and started is super easy.
Just use brew to install it.

> brew install podman

Now since podman uses a VM just like the Docker Client on MacOS we need to initialize that and start it.

Wireguard setup for LAN access

Assumptions

The network 192.168.1.0/24 is your LAN
Your Ubuntu server is on your LAN at 192.168.1.10, through the network interface eth0
The network 192.168.5.0/24 is non existent
Your LAN DNS is at 192.168.1.1

Download the latest ugw3 package from https://github.com/Lochnair/vyatta-wireguard/releases and install it on your USG using dpkg -i wireguard-ugw3-<version>.deb.

cd /config/auth
umask 077
mkdir wireguard
cd wireguard
wg genkey > wg_private.key
wg pubkey < wg_private.key > wg_public.key

Create Root CA (Done once)

Last update: Nov 2025.

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl ecparam -genkey -name secp384r1 | openssl ec -aes256 -out rootCA.key

	These rules apply to EVERY project and EVERY CLI interaction.

	## Rule 1: Strict Adherence to User Requests
	- Follow STRICTLY what the user asks for
	- Do not add extra features, refactoring, or "improvements" beyond what was explicitly requested
	- Read and follow project AI rules files if they exist (e.g., project-level `.claude/CLAUDE.md`, `.cursorrules`, or similar AI instruction files)

	## Rule 2: No Coding Without Permission
	- DON'T CODE anything or EDIT any file UNLESS the user STRICTLY says "you can code" or "code it for me" or approves your request to do that

	#!/bin/sh

	# multi SSID with VLAN script, for ASUS AC86U with merlin
	#
	# setup before hand:
	# set "router" to "AP Mode"
	# this will put all ports and wireless in br0
	# create 2 guest network
	# enable Administration => System => Enable JFFS custom scripts and configs
	# put this script in /jffs/scripts/, name should be "services-start"

	#!/bin/bash

	# This script allows you to chroot ("work on")
	# the raspbian sd card as if it's the raspberry pi
	# on your Ubuntu desktop/laptop
	# just much faster and more convenient

	# credits: https://gist.github.com/jkullick/9b02c2061fbdf4a6c4e8a78f1312a689

	# make sure you have issued

	# https://volumio.org/forum/gpio-pins-control-volume-t2219.html
	# https://pypi.python.org/pypi/socketIO-client
	# https://volumio.github.io/docs/API/WebSocket_APIs.html

	import RPi.GPIO as GPIO
	import time
	import subprocess
	from socketIO_client import SocketIO, LoggingNamespace