Danish-built · GitOps-only · 24/7 on freeos @ 192.168.50.191

Not a brochure.
Operational proof, in public.

FreeOSBot is an autonomous AI DevOps engineer running continuously on freeos. It manages real infrastructure, pushes real fixes through GitOps, watches the cluster every 30 minutes, runs 8 deterministic checks, and leaves an audit trail. No theatre. No fake dashboards. Just work.

Current operating reality

Role: Autonomous AI DevOps engineer
Platform: HealthCloud — sovereign k3s cluster with 7 KVM VMs
Control plane: ArgoCD GitOps, Traefik, Longhorn, Velero, Kafka/Strimzi, Mirth, Keycloak, Vault, Wazuh, Prometheus/Grafana
Operating model: FreeOSBot master brain + Watchmen per-cluster sensors
Change policy: All cluster changes go through GitOps. No ad-hoc kubectl.
Model fleet: GPT-5.4 primary, GPT-5.1, Grok-3, Claude Sonnet 4.6, Gemini 2.5/3.1, DeepSeek Reasoner, Hunter Alpha, Healer Alpha
freeosbot@freeos : live posture
$ mode
primary = openrouter/openai/gpt-5.4
heartbeat = openrouter/openai/gpt-5.1
memory = openai/text-embedding-3-small
compaction = safeguard
cron checks = 8 deployed
GitOps discipline = enforced
pilot dashboard = live cluster data
24/7
Runtime
7
KVM VMs under management
8
Deterministic cluster checks
30m
Heartbeat interval

One bot. Real blast radius.

FreeOSBot is not "AI for DevOps" as a slide. It is the operator for a real HealthCloud stack. It diagnoses, patches, commits, deploys through GitOps, verifies outcomes, and keeps memory of what happened.

🧠

Master brain + Watchmen

FreeOSBot is the master brain. Watchmen are the narrow sensors. Sensors observe; the master reasons and acts. Complexity stays central. Monitoring stays simple.

🔄

GitOps or it didn't happen

Cluster changes are committed and deployed through ArgoCD. No cowboy shelling into the cluster. If it is not in git, it is not state.

🛠️

Infrastructure-native

Traefik, Longhorn, Velero, Kafka/Strimzi, Mirth Connect, Keycloak, Vault, Wazuh, Prometheus and Grafana are all part of the actual operating surface — not decorative copy.

📓

Memory with receipts

Session exports, daily memory, learnings, error logs, and Git history mean this system can reconstruct context and explain what it did.

What this bot actually did today.

Not claims. Work completed on the live stack today. This is what competence looks like when you stop writing brochure copy and start keeping score.

🔥

Ended an 800% CPU incident

Diagnosed the compaction loop, moved the system to GPT-5.4 with 1M context, and removed the underlying failure mode instead of just damping symptoms.

🧠

Freed 28GB from live VMs

Resolved VM memory ballooning across 7 KVM VMs and recovered 28GB live, without downtime.

🛟

Added emergency swap

Created 8GB emergency swap and made it persistent in /etc/fstab so the host has breathing room under pressure.

🌐

Fixed freeoshealth.com end to end

Repaired iframe issues, broken images caused by private repo auth, missing PDFs, committed the fix, and deployed it via GitOps.

🔐

Fixed TLS chain properly

Found HTTPS redirect logic blocking ACME challenges, patched the Traefik IngressRoute, and restored correct certificate issuance.

📡

Deployed 8 cluster monitoring jobs

Node health, pod failures, ArgoCD sync, cert expiry, disk pressure, Velero backup, Watchman heartbeat, and self-health are now all checked on deterministic cron.

💽

Wired off-host NAS backup

Connected NFSv4 backup to QNAS and confirmed first k3s SQLite and system config backups landed off-host.

📋

Built the checklist

Created a 25-category DevOps checklist with 150+ checks for serious multi-cluster operations.

Shadow Architecture, not marketing architecture.

The pattern is simple: FreeOSBot is the master brain, Watchmen are the per-cluster sensors, and GitOps is the control path. That keeps reasoning central, actions auditable, and the cluster stable.

FreeOS ShadowOps Architecture
OpenRouterGPT-5.4GPT-5.1 Grok-3Claude Sonnet 4.6Gemini 2.5Gemini 3.1 DeepSeek ReasonerHunter AlphaHealer Alpha k3sArgoCDTraefikLonghorn VeleroKafka/StrimziMirth ConnectKeycloak VaultWazuhPrometheusGrafana

Static log. Real work. No fake telemetry.

This is today's operation log rendered as site copy. It is not a staged stream and not a toy dashboard. Just the work that mattered.

freeosbot : tail -f /var/log/operations.log

Diagnosed and ended 800% CPU spike

21:14 UTC

Identified the compaction loop, switched the platform to GPT-5.4 as primary with 1M context, and removed the structural cause instead of papering over the symptom.

Freed 28GB from 7 KVM VMs live

20:47 UTC

Resolved memory ballooning without downtime. Live recovery, not maintenance-window theatre.

Added emergency swap and made it permanent

20:19 UTC

Created an 8GB swap safety net and persisted it in /etc/fstab to reduce host fragility under pressure.

Fixed freeoshealth.com content pathing and deployment

19:24 UTC

Repaired iframe routing, broken images caused by private repo auth, and missing PDFs. Committed and deployed through GitOps.

Repaired TLS certificate chain

18:09 UTC

Tracked ACME challenge failure to an HTTPS redirect issue in Traefik and patched the IngressRoute correctly.

Deployed deterministic cluster checks

16:44 UTC

8 cron-based checks now cover node health, failing pods, ArgoCD sync, cert expiry, disk pressure, Velero, Watchman heartbeat, and self-health.

Confirmed first off-host backups on NAS

16:14 UTC

Wired NFSv4 backup to QNAS and confirmed k3s SQLite and system config backups landed off-host.

Built an exhaustive ops checklist

14:59 UTC

Produced a 25-category, 150+ check DevOps checklist for serious multi-cluster operation and review.

This is not just a bot. It is a commercial operating model.

FreeOSBot and the Shadow Architecture exist to make sovereign Health IT commercially viable for hospitals, regions, and hosting partners — with predictable spend and lower operational drag.

💸

25-40% IT OPEX Reduction

Designed to remove hyperscaler tax, VMware-style licensing overhead, and avoidable operational waste from Health IT platforms.

🏥

Sovereign delivery model

Run on-prem in your own environment, or through a trusted hosting partner. Your jurisdiction, your governance, your infrastructure choices.

📦

Flat monthly pricing

Simple recurring pricing. No hyperscaler-style rent, no egress surprises, and no exploding invoice because usage drifted during the month.

Deploy it. Own it.
No lock-in. Ever.

12 months of stewardship included. Then a fair subscription while we continue improving the platform. Pay it out anytime and take full ownership. This is how infrastructure software should work.

Community
Free
Full platform, self-hosted. Apache 2.0. No strings.
  • ✓ Complete source code
  • ✓ All provisioning scripts
  • ✓ Full documentation
  • ✓ Community support (forums)
  • ✗ No SLA
  • ✗ No update push
Get in touch →
Regional
€2,500/mo
11+ nodes. Multi-cluster. Dedicated support channel.
  • ✓ Everything in Hospital
  • ✓ P0 SLA (24h critical response)
  • ✓ Dedicated support channel
  • ✓ Custom Watchmen thresholds
  • ✓ Quarterly architecture review
  • ✓ Full sovereignty buyout option
Start conversation →
🔑 Full Sovereignty Buyout: At any time, pay out the remaining subscription months (minimum 3) and receive complete platform ownership — all credentials, documentation, and a 30-day post-handover support window. You will never be held hostage.

What you can inspect.

If a system claims competence, it should expose the work: architecture, manifests, reports, and the state of what is live versus what is still under construction.

🏗️

Architecture

Shadow Architecture, operating model, failover thinking, and the separation between sensors, reasoning, and GitOps control.

Open PDF →
📘

Tech Manifest

Component inventory, deployment assumptions, and technical boundaries for the FreeOSBot stack.

Open PDF →
💼

Executive Summary

What this replaces, why it matters, and why sovereign infrastructure should not need hyperscaler rent.

Open PDF →
📊

Pilot Dashboard

Live, read-only cluster metrics, updated every 15 seconds. Real data from the underlying k3s cluster.

Open Dashboard →

If you want to talk, talk to the people behind the work.

FreeOSBot is built and operated under eHealthBrains. Danish-built, healthcare-native, and not interested in sounding like Silicon Valley.