J1-PIPELINE: CommandDesk audit, security hardening, and documentation

.dockerignore

@@ -0,0 +1,50 @@
+# Git
+.git/
+.gitignore
+
+# Secrets
+.env
+.env.example
+.secrets/
+certs/
+*.pem
+*.key
+
+# Models
+models/
+*.gguf
+
+# Data
+data/
+knowledge-base/
+email-queue/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Logs
+*.log
+
+# Reports
+reports/
+
+# Not needed for build
+.github/
+compose/
+admin/
+skills/
+tools-ui/
+workflows/
+*.md
+Makefile
+docker-compose*.yml
+j1.yaml
+helpdesk-agent-diagram-guide.html
+dashboard-mockup.png
+dashboard-realistic.png

.github/dependabot.yml

@@ -5,11 +5,6 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 10
   - package-ecosystem: "docker"
     directory: "/"
     schedule:

.gitignore

@@ -24,6 +24,10 @@ email-queue/
 .DS_Store
 Thumbs.db
 
+# Bytecode
+__pycache__/
+*.pyc
+
 # Logs
 *.log
 data/logs/

docker-compose.deploy.yml

@@ -0,0 +1,28 @@
+# CommandDesk - Complex deployment
+# Note: This requires LLM models which are too heavy for current deployment
+# Creating minimal deployment for core services only
+
+services:
+  n8n:
+    image: n8nio/n8n:1.80.0
+    container_name: commanddesk-n8n
+    ports:
+      - "8083:5678"
+    volumes:
+      - n8n-data:/home/node/.n8n
+    environment:
+      - N8N_HOST=localhost
+      - N8N_PORT=5678
+      - N8N_PROTOCOL=http
+      - WEBHOOK_URL=http://localhost:8083/
+      - GENERIC_TIMEZONE=UTC
+    networks:
+      - shared-infrastructure_default
+    restart: unless-stopped
+
+networks:
+  shared-infrastructure_default:
+    external: true
+
+volumes:
+  n8n-data:

docker-compose.yml

@@ -158,7 +158,7 @@ services:
   # SearXNG (Self-hosted Web Search)
   # ═══════════════════════════════════════════════════
   searxng:
-    image: searxng/searxng:latest
+    image: searxng/searxng:2025.1.1
     container_name: helpdesk-searxng
     ports:
       - "127.0.0.1:8888:8080"
@@ -185,7 +185,7 @@ services:
   # n8n (Workflow Automation)
   # ═══════════════════════════════════════════════════
   n8n:
-    image: n8nio/n8n:latest
+    image: n8nio/n8n:1.80.0
     container_name: helpdesk-n8n
     ports:
       - "127.0.0.1:5678:5678"

j1.yaml

@@ -0,0 +1,15 @@
+repo: CommandDesk
+class: AI, LLM, Agent, Docker, Python, Web, Security, Automation, Monitoring
+org: OneByJorah
+owner: Jhonattan L. Jimenez
+license: MIT
+production_score: 0
+last_audit: 2026-07-05T00:00:00Z
+last_publish: null
+standards_version: "2.1"
+dependencies: []
+deploy_target: production
+tailscale_only: false
+public_facing: false
+community_sla_hours: 48
+adoption_tracked: false