myenv

Development environment setup + personal admin/networking/Ghostty scripts, auto-synced to ~/.local/bin so every script is on PATH in every dev environment. One repo, one ./install-autoupdater.sh, done.

One-time setup on a new machine

git clone https://github.com/biofool/myenv.git ~/projects/myenv
cd~/projects/myenv
./Setup.sh # install Python venv, pipx, Poetry, Vault CLI
./install-autoupdater.sh # symlink all scripts to PATH + start auto-update timer

After that, every script in this repo is on PATH and a systemd user timer pulls + re-syncs every 6 h so new/changed scripts appear automatically.

Auto-sync to PATH

sync-to-path.sh symlinks every executable script in this repo into ~/.local/bin (already on PATH on Linux/WSL). install-autoupdater.sh installs a systemd user timer that runs git pull + re-sync every 6 h so new/changed scripts appear on PATH automatically.

Meta-script	Role
sync-to-path.sh	Idempotent — symlinks every executable into ~/.local/bin, cleans stale links, never clobbers real files
env-autoupdate.sh	git pull --ff-only + sync-to-path.sh --quiet (run by the timer)
install-autoupdater.sh	One-time setup — installs/uninstalls the systemd user timer (--uninstall, --status)

Environment setup (Setup.sh)

Prepares a fresh Ubuntu box with:

1. Python 3 venv — python3-venv package.
2. HashiCorp Vault CLI — adds the HashiCorp apt repository and installs vault.
3. pipx — user-level Python package installer (via pip --user).
4. Poetry — Python dependency management (via pipx).

Run on a fresh Ubuntu system or VM. Verify with: vault version, pipx --version, poetry --version.

Private peer link (start here for 2-machine networking)

Connect one Ubuntu machine and one Windows 11 PC over a dedicated Ethernet link (USB-Ethernet adapters are fine). Both keep normal WiFi for internet. No firewall and no NAT yet — connectivity only.

Role	Host	Address
DHCP hub	Ubuntu	192.168.50.1
DHCP client	Windows	192.168.50.100–.200

DHCP offers addresses only (no gateway, no DNS), so WiFi stays the internet path.

Ubuntu

sudo bash install-private-link-linux.sh
# or pass the dedicated Ethernet iface:
sudo bash install-private-link-linux.sh enx...

One-liner:

curl -fsSL https://raw.githubusercontent.com/biofool/myenv/main/install-private-link-linux.sh | sudo bash

Windows 11

Copy install-private-link-windows.ps1 and install-private-link-windows.cmd to the PC, then run the .cmd as Administrator (or in elevated PowerShell):

.\install-private-link-windows.ps1

Verify

# Windows
ping 192.168.50.1
Test-NetConnection 192.168.50.1 -Port 22
# Ubuntu
systemctl status isc-dhcp-server
ip -4 addr show
journalctl -u isc-dhcp-server -n 30 --no-pager

Intended peer ports for a later firewall pass (not enforced yet): TCP 22, 443, 4000, 5555, 8000, 8888; UDP 4000, 4011-4999 (NoMachine).

Full private LAN stack

Heavier setup: DHCP + optional one-way NAT, Pi-hole, and nftables. Default subnet 192.168.50.0/24.

Script	Role
install-ipv4-dhcp-local.sh	Linux router/server (IPv4 DHCP, NAT, optional Pi-hole)
install-ipv6-dhcp-local.sh	Linux IPv6-only LAN (ULA + radvd)
install-private-lan-client-linux.sh	Linux client (DHCP, rejects offered routes, NoMachine firewall)
monitor-dual-homed-windows.ps1	Windows dual-homed diagnostics / watch mode

AnyConnect multi-user disconnect scanner (Windows)

Diagnose why Cisco AnyConnect / Cisco Secure Client drops or refuses a VPN because it "detected another logged in user". Cisco enforces a single interactive user during a tunnel (profile WindowsLogonEnforcement / WindowsVPNEstablishment), so Fast User Switching, an RDP session, or a leftover disconnected session trips it. The scanner is read-only: it inventories live sessions, correlates Windows logon/RDP events, scans the Cisco logs for the tell-tale phrases, parses the client profile, then ranks the likely root cause with cited evidence and prints remediation.

Copy scan-anyconnect-multiuser-windows.ps1 and scan-anyconnect-multiuser-windows.cmd to the PC, then run the .cmd (elevation is requested automatically for full log access):

# one-shot, last 24h (run elevated for Security-log correlation)
.\scan-anyconnect-multiuser-windows.ps1
# look back a week and export Cisco DART / TAC hints
.\scan-anyconnect-multiuser-windows.ps1 -Hours 168-ExportDartHints
# watch live while you reproduce the disconnect
.\scan-anyconnect-multiuser-windows.ps1 -Watch -IntervalSeconds 15

Output (console + timestamped log + JSON report) lands in %ProgramData%\anyconnect-multiuser-scan. Exit code: 2 likely multi-user cause, 1 warnings/weaker signals, 0 clean.

Ghostty / Devin launcher scripts

The ghostty/ subdirectory holds scripts that orchestrate Devin CLI instances inside Ghostty terminal windows, plus SSH/VNC browser helpers and Ghostty +ssh upgrade management. Consolidated from the retired biofool/ghostty-helper repo. See ghostty/README.md for the full list and quick start.

Other scripts

Script	Purpose
Setup.sh	One-time env setup: Python venv, Vault, pipx, Poetry
gsutilupdate.sh	Reinstall Google Cloud CLI from apt
restartNX	systemctl restart nxserver.service
CachyOS.ps1	CachyOS-specific setup helper

Notes

• Prefer passing the interface name explicitly when testing.
• Use --help on install scripts; --force / FORCE=1 skips confirmations.
• These scripts often run as root and change live networking — read them before running.
• Agent-oriented detail lives in CLAUDE.md.