Skip to content

Quick Start Guide

Goal: Get access and start working in under 10 minutes.


Prerequisites

You need: - A device (MacBook, iPad, or PC) - Access to Tailscale VPN - SSH public key added to servers (ask admin if not done)


Step 1: Connect to Tailscale (1 minute)

  1. Open Tailscale app on your device
  2. Verify you're connected (green checkmark)
  3. Your device should have a 100.x.x.x IP address

Verify connection:

ping 100.80.53.55  # Hetzner VPS


Step 2: SSH to Server (1 minute)

Option A: Hetzner VPS (Germany)

ssh kavi@100.80.53.55

Option B: Kimsufi (Canada)

ssh ubuntu@100.81.231.36

Recommended for most work: Hetzner VPS (has Infisical, PostgreSQL, Redis, all dev tools)


Step 3: First dev() Session (5 minutes)

Once connected via SSH:

# Launch development environment
dev

You'll be prompted to select:

  1. Project: Choose from ~/Coding/* or type project name
  2. Infisical Project: Usually personal-vault
  3. Infisical Environment: Usually dev
  4. Gemini Account: edu1, edu2, edu3, edu4 (or skip)
  5. Claude Account: personal, edu1, edu2, work (or skip)
  6. OpenAI Account: chatgpt, edu1, edu2, work (or skip)

Example:

📂 Select a project: my-app
🔐 Select Infisical project: personal-vault
🌍 Select environment: dev
🤖 Select Gemini account: edu1
🤖 Select Claude account: personal
🤖 Select OpenAI account: skip

🚀 Launching container...

You're now inside a Docker container with: - ✅ Claude Code pre-installed - ✅ Gemini CLI pre-installed - ✅ All your secrets from Infisical (as environment variables) - ✅ Your code mounted at /app - ✅ SSH keys mounted (for git operations)


Step 4: Start Working (2 minutes)

Use AI Agents

# Use Claude
claude

# Use Gemini
gemini

Verify Secrets Loaded

# Check environment variables
env | grep API_KEY

# Should see:
# ANTHROPIC_API_KEY=sk-ant-...
# GOOGLE_API_KEY=...
# etc.

Git Operations

git status
git add .
git commit -m "Your message"
git push

Git authentication: Uses your mounted SSH keys automatically.


Step 5: Exit Container

exit

What happens on exit: - Container is automatically removed (--rm flag) - Temporary secrets file (/tmp/env-$$.list) is automatically deleted - Your code changes are preserved (mounted from ~/Coding/)


Common First-Time Issues

"Infisical not authenticated"

# Authenticate to Infisical
infisical login --domain=http://100.80.53.55:8080

# Or with HTTPS
infisical login --domain=https://secrets.kua.cl

"OAuth file not found"

You haven't set up that AI account yet. Either: - Skip the account selection - Set up the account (see Multi-Identity Guide)

"Permission denied (publickey)"

Your SSH public key isn't added to the server yet. Contact admin or see SSH Keys Guide.

"Container fails to start"

Check Docker is running:

docker ps

If not, contact admin to verify Docker installation.


What's Next?

Now that you're up and running:


Quick Reference

Server IPs

Server Tailscale IP Public IP User
Hetzner VPS (Germany) 100.80.53.55 46.224.146.107 kavi
Kimsufi (Canada) 100.81.231.36 144.217.76.53 ubuntu

Service URLs

Service URL
Infisical https://secrets.kua.cl
Documentation http://100.80.53.55:8001
Plex https://plex.kua.cl
Overseerr https://overseerr.kua.cl
KaviCloud https://media.kua.cl

Essential Commands

# SSH to servers
ssh kavi@100.80.53.55      # Hetzner
ssh ubuntu@100.81.231.36   # Kimsufi

# Development
dev                         # Launch dev container
dev my-project             # Launch specific project

# Infisical
infisical login --domain=https://secrets.kua.cl
infisical projects         # List projects
infisical secrets          # List secrets

For AI Agents

Context Boundaries: - You are inside a Docker container when using dev() - Your working directory is /app/<project>/ - Do not edit files outside /app/ - Secrets are available as environment variables - SSH keys are mounted read-only at /root/.ssh/ - Never ask users for API keys (they're already in the environment)

Self-Onboarding: - Read the Development Overview - Understand .ai-context.md Standard - Review Security Model