vps-opslisted

# vps-ops — VPS deploy & management (Coolify) Takes a project built by `expert-build-pack` and ships it to a real server: bootstrap the VPS, install Coolify, point the domain, deploy, and then run the whole "user asks for a change → it ships" loop — all from the harness, without the user ever touching the server. ## When to use - The user wants to deploy/host/go live, mentions a VPS, Coolify, domain/DNS/SSL, or "put my app online". - Any post-deploy request: check status, read logs, ship a change, roll back, backups, updates. - The buildout skill (`expert-build-pack`) finished in the project — deploy is the next phase. ## The promise (what the user does vs what you do) The user provides ONLY: VPS + domain (+ optionally a provider API token). Everything else is your job. Two one-time browser moments are unavoidable and are guided click-by-click in `references/00-user-checklist.md`: 1. Create the Coolify admin account + copy one API token. 2. (Private repos) approve the GitHub App install. Never ask the user to open a terminal on the server or run server commands — you run everything via `ssh`/API from the harness. ## Invariants (never violate) - Secrets live ONLY in `~/.vps-ops/` (chmod 600) and in Coolify env vars. Never in repos, chat, or logs. - Never disable SSH (port 22) — Coolify manages servers over SSH, including localhost. - Validate before write: DNS changes go through `validate` first; firewall changes keep 22 open; GET-before-PUT snapshots anything you ov