From 98c6d47d7ffadc51a31e66dc5733bfd7df91d19c Mon Sep 17 00:00:00 2001
From: Hyperling <me@hyperling.com>
Date: Sat, 17 Oct 2026 12:55:27 -0700
Subject: [PATCH] provision, add params for open-terminal, plus an optional key
 for qwen code.

---
 tasks/general/acct_mgmt/provision_config.yml | 53 +++++++++++++++++---
 1 file changed, 45 insertions(+), 8 deletions(-)

diff --git a/tasks/general/acct_mgmt/provision_config.yml b/tasks/general/acct_mgmt/provision_config.yml
index 97c1abb..982f698 100644
--- a/tasks/general/acct_mgmt/provision_config.yml
+++ b/tasks/general/acct_mgmt/provision_config.yml
@@ -314,7 +314,7 @@
     block: |
       ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; LLMs: GUIs ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
       ;
-      ; zero (default=true)
+      ; zeroclaw (default=true)
       ;   Install and enable the Zeroclaw web daemon, a minimalistic interface
       ;   for many models and providers with negligible resource usage. Also
       ;   installs the CLI tool zerocode as an alternative to the web GUI.
@@ -324,7 +324,7 @@
       ;   Install and enable open-webui as a Docker container. Very polished web
       ;   frontend for ollama and also handles other web LLMs through API calls.
       ;   Container is over 1GB in size and consumes substantial resources!
-      ;     URL: http://localhost:1337
+      ;     URL: http://localhost:3000
       ;
       ; open_webui_port (default=3000)
       ;   Port on which to run the open-webui Docker instance.
@@ -343,6 +343,33 @@
       ;   Install and enable qwen-code as a daemon.
       ;     URL: http://127.0.0.1:4170
       ;
+      ; qwen_code_key (default='')
+      ;   API key for accessing the web GUI. Optional, not used if left blank.
+      ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | Workstation | Create | LLMs | GUIs
+  ansible.builtin.blockinfile:
+    path: "{{ wrk_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Workstation Config | LLMs | GUIs'
+    block: |
+      ;;;;;;;;;;;;;;;;;;;;;;;;; LLMs: MCPs / Sandboxes ;;;;;;;;;;;;;;;;;;;;;;;;;
+      ;
+      ; open_terminal (default=false)
+      ;   Docker container to be used with GUIs like open-webui so that agents
+      ;   have somewhere safe to execute commands. Also allows file read/writes.
+      ;     URL: http://127.0.0.1:8000
+      ;
+      ; open_terminal_port (default=8000)
+      ;   Port on which to run the open-terminal Docker instance.
+      ;
+      ; open_terminal_key (default=open-terminal-key)
+      ;   API key, needed in order to access the server. Required.
+      ;
       ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
     state: present
     create: true
@@ -392,15 +419,21 @@
     mobile:  "{{ lookup('ini', 'mobile  file={{wrk_file}} default=false') | bool }}"
     redmode: "{{ lookup('ini', 'redmode file={{wrk_file}} default=true' ) | bool }}"
     # LLMs
-    ollama_enabled:     "{{ lookup('ini', 'ollama          file={{wrk_file}} default=true' ) | bool }}"
-    manage_models:      "{{ lookup('ini', 'manage_models   file={{wrk_file}} default=true' ) | bool }}"
-    zeroclaw_enabled:   "{{ lookup('ini', 'zero            file={{wrk_file}} default=true ') | bool }}"
+    ollama_enabled: "{{ lookup('ini', 'ollama        file={{wrk_file}} default=true' ) | bool }}"
+    manage_models:  "{{ lookup('ini', 'manage_models file={{wrk_file}} default=true' ) | bool }}"
+    hf_token:       "{{ lookup('ini', 'hf_token      file={{wrk_file}} default=false')        }}"
+    # LLM GUIs
+    zeroclaw_enabled:   "{{ lookup('ini', 'zeroclaw        file={{wrk_file}} default=true ') | bool }}"
     open_webui_enabled: "{{ lookup('ini', 'open_webui      file={{wrk_file}} default=false') | bool }}"
-    open_webui_port:    "{{ lookup('ini', 'open_webui_port file={{wrk_file}} default=1337' ) | int  }}"
+    open_webui_port:    "{{ lookup('ini', 'open_webui_port file={{wrk_file}} default=3000' ) | int  }}"
     open_webui_key:     "{{ lookup('ini', 'open_webui_key  file={{wrk_file}} default=PleaseEnsureTheKeyIsAtLeast32To64Characters') }}"
-    hf_token:           "{{ lookup('ini', 'hf_token        file={{wrk_file}} default=false')        }}"
     codium_config:      "{{ lookup('ini', 'codium_config   file={{wrk_file}} default=true' ) | bool }}"
     qwen_code_enabled:  "{{ lookup('ini', 'qwen_code       file={{wrk_file}} default=true' ) | bool }}"
+    qwen_code_key    :  "{{ lookup('ini', 'qwen_code_key   file={{wrk_file}} default=false')        }}"
+    # LLM MCPs
+    open_terminal_enabled: "{{ lookup('ini', 'open_terminal      file={{wrk_file}} default=false') | bool }}"
+    open_terminal_port:    "{{ lookup('ini', 'open_terminal_port file={{wrk_file}} default=8000' ) | int  }}"
+    open_terminal_key:     "{{ lookup('ini', 'open_terminal_key  file={{wrk_file}} default=false')        }}"
 
 - name: General | Account Management | Provisioning Configuration | Workstation | Boolean Check | Editing
   ansible.builtin.set_fact:
@@ -423,13 +456,17 @@
     - { 'redmode': "{{ redmode }}" }
     - { 'ollama_enabled': "{{ ollama_enabled }}" }
     - { 'manage_models': "{{ manage_models }}" }
+    - { 'hf_token': "{{ hf_token }}" }
     - { 'zeroclaw_enabled': "{{ zeroclaw_enabled }}" }
     - { 'open_webui_enabled': "{{ open_webui_enabled }}" }
     - { 'open_webui_port': "{{ open_webui_port }}" }
     - { 'open_webui_key': "{{ open_webui_key }}" }
-    - { 'hf_token': "{{ hf_token }}" }
     - { 'codium_config': "{{ codium_config }}" }
     - { 'qwen_code_enabled': "{{ qwen_code_enabled }}" }
+    - { 'qwen_code_key': "{{ qwen_code_key }}" }
+    - { 'open_terminal_enabled': "{{ open_terminal_enabled }}" }
+    - { 'open_terminal_port': "{{ open_terminal_port }}" }
+    - { 'open_terminal_key': "{{ open_terminal_key }}" }
 
 # No longer mining, this is now considered deprecated.
 ### Miner ##