charly-infrastructure
Infrastructure services and system layers — postgresql, redis, valkey, vectorchord, k3s cluster, traefik, supervisord, tailscale, gocryptfs, virtualization, dbus-layer, tmux-layer.
By opencharlyLicense: MIT0 GitHub starsUpdated 1 hour ago
Directory evidence
- Runtimes
- Codex and Claude Code
- Parsed components
- 22 skill or MCP entries
- Source updated
- Aug 28, 2026
- Manifest status
- Canonical path parsed
The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →
Install plugin
codex plugin marketplace add IchenDEV/agent-plugin-mkt
codex plugin marketplace upgrade agent-plugin-marketplace
codex plugin add charly-infrastructure@agent-plugin-marketplacePaste and run these commands in a terminal with Codex. They add and refresh the PluginsMP catalog, then install this plugin.
The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.
Get the source manually
git clone https://github.com/opencharly/marketplaceClone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is infrastructure/.
Plugin files
├── .codex-plugin/plugin.json├── .claude-plugin/plugin.json├── skills/dbus-layer/SKILL.md├── skills/gnupg/SKILL.md├── skills/gocryptfs/SKILL.md├── skills/k3s/SKILL.md├── skills/k3s-agent/SKILL.md├── skills/k3s-server/SKILL.md├── skills/keepassxc/SKILL.md├── skills/keepassxc-keyring/SKILL.md├── skills/postgresql/SKILL.md├── skills/redis/SKILL.md├── skills/socat/SKILL.md├── skills/sqlite/SKILL.md├── skills/ssh-client/SKILL.md├── skills/supervisord/SKILL.md├── skills/tailscale/SKILL.md├── skills/tailscale-up/SKILL.md├── skills/testapi/SKILL.md├── skills/tmux-layer/SKILL.md├── skills/traefik/SKILL.md├── skills/valkey/SKILL.md├── skills/vectorchord/SKILL.md└── skills/virtualization/SKILL.md
Included Skills22
D-Bus session bus for inter-process communication inside containers. Use when working with D-Bus, desktop services, Wayland compositor dependencies, or the `dbus:` check verb.
GnuPG encryption and signing tools for GPG agent forwarding. Use when working with GPG, encryption, signing, or the gnupg candy.
Encrypted filesystem (gocryptfs) for charly config encrypted volume operations. Use when working with encrypted volumes, charly config mount/unmount, or filesystem encryption.
k3s binary installer (common base for k3s-server and k3s-agent). Use when building images that need the k3s binary but do NOT want a server/agent service started automatically.
k3s worker (agent) node — joins an existing k3s-server via pre-shared token. Fully declarative: same charly secrets set once + env K3S_SERVER_URL per agent deploy.
k3s control-plane (server) node with ServiceLB, Traefik v2, and local-path-provisioner enabled by default. Publishes kubeconfig back to the operator via layer artifacts and registers a ClusterProfile on first boot.
KeePassXC password manager desktop app. Single-responsibility candy (rpm+pac, one test). Use when adding KeePassXC to a box as a standalone candy.
Configure KeePassXC as the freedesktop.org Secret Service provider on a target:local host: enable FdoSecrets, autostart KeePassXC, disable competing daemons (gnome-keyring + kwallet) at the per-user XDG-autostart and systemd-user-unit layers, install pinentry/libsecret, and install generic direnv shell hooks for bash/zsh/fish. Use when adding KeePassXC as the Secret Service backend on a host (NOT for adding the binary to a container image — use /charly-infrastructure:keepassxc for that).
PostgreSQL database server on port 5432 with pgvector extension and persistent data. Entrypoint supports POSTGRES_SHARED_PRELOAD_LIBRARIES for extension loading. Use when working with PostgreSQL, database configuration, or pgvector.
Redis in-memory data store on port 6379 with periodic persistence. Use when working with Redis, caching, or session storage in containers.
Socket relay tool for VM console access and port relays (eth0 to loopback). Use when working with port relays, socat, or loopback service exposure.
SQLite database CLI. Use when working with the sqlite candy.
OpenSSH client tools for SSH agent forwarding. Use when working with SSH client, SSH agent forwarding, or the ssh-client candy.
Supervisord process manager for running multiple services inside containers. Use when working with supervisord, container service management, multi-process containers, event listeners for crash-loop circuit breaking, or service priority ordering.
Tailscale mesh VPN (tailscaled service). Installs the tailscale package from upstream, enables tailscaled.service via systemd. Use when adding Tailscale as a standalone systemd service to a box — distinct from the deploy-time Tailscale tunnel/sidecar model.
Tailscale runtime wiring for target:local hosts. Sets `--operator=$account` + `--hostname=$(hostname -s)` so user-systemd ExecStartPost can run `tailscale serve` without sudo, and the tailnet device name stays in sync with the system hostname. Depends on /charly-infrastructure:tailscale (which installs the daemon). Self-gates on `systemctl is-active tailscaled` so it's a no-op in image-build / pre-auth contexts. Use when adding deploy-runtime tailscale wiring to a target:local host (canonical consumer: local.charly-cachyos) — distinct from the tailscale candy which only installs + enables the daemon.
FastAPI test service on port 9090 routed via testapi.localhost for development testing. Use when working with the test API, Traefik routing validation, or service health checks.
Terminal multiplexer. Use when working with the tmux candy.
Traefik reverse proxy on ports 8000/8080/443 with automatic TLS and dynamic routing. Use when working with Traefik, reverse proxy, TLS certificates, or service routing.
Valkey 9.x key-value store (Redis-compatible) on port 6379 via Remi modular repo. Use when working with Valkey, Redis-compatible caching, or the valkey candy.
VectorChord PostgreSQL extension for optimized vector similarity search. Use when working with VectorChord, vector indices, or smart search performance.
QEMU/KVM/libvirt stack — works identically under supervisord (containers/ pods, custom `exec:` form) AND under systemd (host installs / bootc / VMs, use_packaged: socket form). The daemon set is DISTRO-DIVERGENT: Fedora/Arch ship the modular virtqemud + virtnetworkd, Debian/Ubuntu ship only the monolithic libvirtd — selected by a per-entry `service: distro:` filter. Uses the mixed-entry `service:` schema (CLAUDE.md "Init-system polymorphism") — same name appears twice, init system at deploy time picks the matching form. Canonical worked example of the polymorphism pattern.
Plugin manifests2
{
"name": "charly-infrastructure",
"description": "Infrastructure services and system layers — postgresql, redis, valkey, vectorchord, k3s cluster, traefik, supervisord, tailscale, gocryptfs, virtualization, dbus-layer, tmux-layer.",
"author": {
"name": "opencharly"
},
"repository": "https://github.com/opencharly/marketplace",
"skills": "./skills/",
"interface": {
"displayName": "OpenCharly Infrastructure",
"shortDescription": "Infrastructure services and system layers — postgresql, redis, valkey, vectorchord, k3s cluster, traefik, supervisord, tailscale, gocryptfs, virtualization, dbus-layer, tmux-layer.",
"longDescription": "Infrastructure services and system layers — postgresql, redis, valkey, vectorchord, k3s cluster, traefik, supervisord, tailscale, gocryptfs, virtualization, dbus-layer, tmux-layer.",
"developerName": "opencharly",
"category": "images",
"capabilities": [
"Instructions"
],
"defaultPrompt": [
"Use OpenCharly Infrastructure for this OpenCharly task."
]
}
}{
"name": "charly-infrastructure",
"description": "Infrastructure services and system layers — postgresql, redis, valkey, vectorchord, k3s cluster, traefik, supervisord, tailscale, gocryptfs, virtualization, dbus-layer, tmux-layer.",
"author": {
"name": "opencharly"
},
"homepage": "https://github.com/opencharly/charly",
"repository": "https://github.com/opencharly/marketplace",
"license": "MIT",
"keywords": [
"charly",
"postgresql",
"redis",
"k3s",
"traefik",
"tailscale",
"supervisord"
]
}For maintainers
If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.
[charly-infrastructure on Agent Plugins Marketplace](https://pluginsmp.com/plugins/charly-infrastructure)