The ship around the agents

Four things that make agents about ten times more useful, with opinions. Then the fun part.

An agent on a bare Mac mini can read files and run commands. Most of what makes Jeff’s agents useful is the four things around them, and none of the four is exotic. You know what each one is. The opinions are the point.

The four

Tailscale. One private network across the mini, your laptop, and your phone, wherever they are, no port forwarding, no router config. Every other thing on this page assumes it. It is the try-now below because it is fifteen minutes and it changes what the mini is for.

Caddy, not nginx. You know what a reverse proxy does. The argument for Caddy is that a service is three lines of config and HTTPS is automatic, so you add the block instead of putting it off. One process, one file, caddy reload when you change it. Details on Caddy and a domain.

n8n, next to the agents rather than instead of them. You have heard Jeff talk about it for a year. The one-line case on a mini is that it holds the schedules and webhooks, so an agent does not have to be awake to do the 6 a.m. job, and an agent can call an n8n webhook to do the tedious glue. n8n on a mini.

A knowledge store agents can search. Markdown in a git repo. You run this already in the pod vault. The two things you may not have are a way for agents to search it by meaning rather than filename, and a rule about what never goes in it. Obsidian as the agents’ brain.

Something that tells you when a thing is wrong belongs on the list too, and it goes in after the four, not before, or it pages you about services you have not built. Monitoring, the simple version.

The fun part

Once the four are in, the mini is a place to run things. A media server, since you stream from Jeff’s already. Home Assistant if there is anything smart in the house. A home page listing every service with a status light, which is the seed of the Enterprise-D dashboard. Homepage is the one most people start with and it reads a Docker socket to populate itself.

Docker on a Mac mini, honestly

Run containers with OrbStack or Colima, not Docker Desktop. Both are lighter, and OrbStack is the pleasant one. Anything that needs to touch the Mac itself, Claude Code, the Messages database, anything with a keychain, runs natively under launchd instead. Containers for services, launchd for things that need the Mac. The two traps that cost Jeff’s crew real time are a bind mount that cannot traverse a directory symlink, and a container healthcheck that uses localhost and resolves it to IPv6 while the app listens on IPv4, which reads as permanently unhealthy. Use 127.0.0.1 in healthchecks.

Try this now

Fifteen minutes. Tailscale on the mini and your phone.

  1. On the mini, brew install --cask tailscale, open it, sign in.
  2. Tailscale app on the phone, same account.
  3. On the mini, turn on Remote Login in System Settings.

How you know it worked. Put the phone on cellular. Open a terminal app on it and SSH to the mini by its Tailscale name. Different network, and it answers.

Read more