0. Overview — เริ่มจากไหน?

What you get at the end

How to read this guide

1. อ่าน Foundation (Section 0-4) ก่อน — ใช้เวลา ~15 นาที
2. เริ่มทำที่ PC #1 (Laptop) → ทำตาม section 5 จบครบทุก step
3. ไป PC #2 (2060) → section 6
4. ...ทำเรียงลำดับจน PC #5 (i5) → section 9
5. End-to-End Verify (section 10) → ทุก service ตอบ OK ไหม?
6. เริ่ม PMF Mining (section 11) → ปล่อยรันข้ามคืน

1. Newbie Concepts (อ่านก่อน, สำคัญ)

Tailscale คืออะไร

• tailnet = network เสมือนของคุณ · ชื่อแบบ your-name.tail-xxxx.ts.net
• MagicDNS = แทนที่จะใช้ IP 100.x.y.z ใช้ชื่อ desktop-5080 ได้เลย
• tailnet IP = 100.x.y.z (range พิเศษ ไม่ชนกับ LAN จริง)

Ollama คืออะไร

Docker คืออะไร

Port คืออะไร

Risk tier (สำคัญมาก)

2. Hardware Inventory (5 PCs)

Role per PC

3. Network Topology

หลัง setup เสร็จ — มอง 5 PCs

            ┌──────────── Tailscale Mesh ─────────────┐
            │      (WireGuard, MagicDNS, ฟรี)         │
            │                                          │
┌───────────▼────┐  ┌──────────────┐  ┌─────────────┐ │
│  Laptop        │  │  5080        │  │  2060       │ │
│  RTX 4050      │  │  RTX 5080    │  │  RTX 2060   │ │
│  🔴 SECRET     │  │  16GB        │  │  6GB        │ │
│  • Doctrine    │  │  • SBOS      │  │  • l2-hub   │ │
│  • Claude Code │  │  • Qdrant    │  │  • LiteLLM  │ │
│  • TMAO live   │  │  • Ollama14B │  │  • Synapse  │ │
└────────────────┘  └──────────────┘  └─────────────┘ │
                                                       │
                  ┌──────────────┐  ┌─────────────┐   │
                  │  i3          │  │  i5         │   │
                  │  always-on   │  │  4GB        │   │
                  │  • Postgres  │  │  • Platform │   │
                  │  • Backup    │  │    IO USB   │   │
                  └──────────────┘  └─────────────┘   │
                                                       │
MagicDNS hostnames:                                    ▼
- laptop-jaao       - desktop-5080    - desktop-2060
- i3-server         - i5-flash

4. Account Setup (ทำครั้งเดียว, ทุก PC ใช้ร่วม)

4.1 Tailscale account (ฟรี 100 devices)

1. เปิด login.tailscale.com/start
2. Sign in ด้วย Google / GitHub / Microsoft (account เดียวกับที่ใช้บน 5 PCs)
3. หน้าจะแสดง tailnet name เช่น jaao.tail-xxxx.ts.net — จดไว้
4. ตั้งใน admin panel → DNS → toggle MagicDNS ON

4.2 GitHub access

ใช้ account wt-phatchara ที่มีอยู่ · เตรียม Personal Access Token (PAT) สำหรับ clone repo บน PC อื่น:

1. ไปที่ github.com/settings/tokens
2. Generate new token (classic) · scope = repo
3. Copy token → save ใน password manager (Bitwarden/1Password)

4.3 Decisions (locked)

5.1 Pre-flight (7 steps)

copyInstall-Module PSWindowsUpdate -Force -Scope CurrentUser
Get-WindowsUpdate
Install-WindowsUpdate -AcceptAll -AutoReboot

copy[bool](([Security.Principal.WindowsIdentity]::GetCurrent()).Groups -match "S-1-5-32-544")
# ต้องได้ True

copyping login.tailscale.com
ping github.com
nslookup login.tailscale.com

copyhostname  # ดูชื่อปัจจุบัน
Rename-Computer -NewName "laptop-jaao" -Restart -Force
# จะ reboot อัตโนมัติ

copyGet-PSDrive C | Select-Object @{N='FreeGB';E={[math]::Round($_.Free/1GB,1)}}
# FreeGB ต้อง ≥ 20

copywinget install --id Python.Python.3.12 -e
winget install --id Git.Git -e
nvidia-smi  # ตรวจ driver มีไหม

5.2 Install Tailscale

copywinget install --id Tailscale.Tailscale -e
# หรือดาวน์โหลด MSI จาก https://pkgs.tailscale.com/stable/#windows

5.3 Join tailnet

copytailscale up --hostname=laptop-jaao
# Browser เปิด → sign in → approve

5.4 Verify

copytailscale status
tailscale ip -4
# ต้องเห็น 100.x.y.z

5.5 Install Ollama (loopback only)

copywinget install Ollama.Ollama
# Default OLLAMA_HOST=127.0.0.1:11434 (loopback) — ไม่ต้องเปลี่ยน

ollama pull phi4-mini
# ~2.5 GB

curl http://127.0.0.1:11434/api/tags

5.6 Git verify

copycd C:\Users\JA
git status
git log -1 --oneline
# ต้องเห็น branch dev · clean tree

5.7 Checklist Laptop

6.1 Pre-flight (7 steps)

copyInstall-Module PSWindowsUpdate -Force -Scope CurrentUser
Install-WindowsUpdate -AcceptAll -AutoReboot

copy[bool](([Security.Principal.WindowsIdentity]::GetCurrent()).Groups -match "S-1-5-32-544")

copyping login.tailscale.com
ping github.com

copyRename-Computer -NewName "desktop-2060" -Restart -Force

copyGet-PSDrive C | Select-Object @{N='FreeGB';E={[math]::Round($_.Free/1GB,1)}}

copywinget install --id Python.Python.3.12 -e
winget install --id Git.Git -e
winget install --id Docker.DockerDesktop -e
nvidia-smi

copygit config --global user.email "wt.inlife@gmail.com"
git config --global user.name "Phatchara"
# Save PAT as Windows Credential
cmdkey /generic:git:https://github.com /user:wt-phatchara /pass:YOUR_PAT_HERE

6.2 Install Tailscale

copywinget install --id Tailscale.Tailscale -e
tailscale up --hostname=desktop-2060
tailscale status
tailscale ip -4

6.3 Verify mesh from laptop

กลับไปที่ laptop:

copyping desktop-2060
tailscale status
# ต้องเห็น desktop-2060 active

6.4 Install Ollama (bind 0.0.0.0)

copywinget install Ollama.Ollama

# Bind ทุก interface (so tailnet peers reach)
[Environment]::SetEnvironmentVariable("OLLAMA_HOST","0.0.0.0:11434","Machine")
Restart-Service Ollama

# Verify bind
netstat -ano | findstr :11434
# ต้องเห็น 0.0.0.0:11434

6.5 Pull SLM models (6GB VRAM budget)

copyollama pull qwen2.5-coder:7b      # 4.7 GB · scoring class
ollama pull llama3.2:1b           # 1.3 GB · fallback
ollama list

6.6 Clone operator-os repo

copymkdir C:\workspace
cd C:\workspace
git clone https://github.com/wt-phatchara/operator-os.git
# ใส่ PAT จาก step 7

6.7 Start l2-hub + LiteLLM (Docker)

copycd C:\workspace\operator-os\l2-hub

# Scenario env
$env:OPERATOR_SCENARIO = "S1"
$env:OPERATOR_PC_ROLE = "2060"

# Start (.env ต้องมี)
docker compose --profile S1 up -d

# Verify
docker ps
curl http://localhost:8100/health
curl http://localhost:4000/health/liveliness

6.8 Firewall (allow Tailscale only)

copy$ports = @(8100, 4000, 6380, 8500, 8700, 8650, 11434)
foreach ($p in $ports) {
  New-NetFirewallRule -DisplayName "Service-$p (Tailscale)" -Direction Inbound `
    -InterfaceAlias "Tailscale" -Protocol TCP -LocalPort $p -Action Allow
}

6.9 Disable sleep (always-on spine)

copypowercfg /change standby-timeout-ac 0
powercfg /change hibernate-timeout-ac 0
powercfg /setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
powercfg /query | findstr "Sleep Hibernate"

6.10 Verify cross-PC (from laptop)

copycurl http://desktop-2060:11434/api/tags
curl http://desktop-2060:8100/health
curl http://desktop-2060:4000/health/liveliness

6.11 Checklist 2060

7.1 Pre-flight (7 steps)

เหมือน 2060 · ต่างแค่ hostname

copy# 1. Windows update
Install-Module PSWindowsUpdate -Force -Scope CurrentUser
Install-WindowsUpdate -AcceptAll -AutoReboot

# 2. Admin verify
[bool](([Security.Principal.WindowsIdentity]::GetCurrent()).Groups -match "S-1-5-32-544")

# 3. Internet
ping login.tailscale.com ; ping github.com

# 4. Hostname
Rename-Computer -NewName "desktop-5080" -Restart -Force

# 5. Disk
Get-PSDrive C | Select-Object @{N='FreeGB';E={[math]::Round($_.Free/1GB,1)}}

# 6. Tools (driver ต้อง ≥ 570 สำหรับ RTX 5080)
winget install --id Python.Python.3.12 -e
winget install --id Git.Git -e
winget install --id Docker.DockerDesktop -e
nvidia-smi  # ต้องเห็น RTX 5080 + driver ≥ 570

# 7. Git config + PAT
git config --global user.email "wt.inlife@gmail.com"
git config --global user.name "Phatchara"
cmdkey /generic:git:https://github.com /user:wt-phatchara /pass:YOUR_PAT_HERE

7.2 Install Tailscale

copywinget install --id Tailscale.Tailscale -e
tailscale up --hostname=desktop-5080
tailscale status

7.3 Verify mesh

จาก laptop:

copyping desktop-5080
ping desktop-2060
# ทั้ง 2 ตัวต้องเห็น

7.4 Install Ollama (heavy 14B)

copywinget install Ollama.Ollama
[Environment]::SetEnvironmentVariable("OLLAMA_HOST","0.0.0.0:11434","Machine")
Restart-Service Ollama
netstat -ano | findstr :11434  # ต้องเห็น 0.0.0.0:11434

7.5 Pull heavy models (16 GB VRAM budget)

copyollama pull qwen2.5:14b           # 9 GB · primary
ollama pull qwen2.5-coder:7b      # 4.7 GB · PMF mining
ollama pull bge-m3                # 1.2 GB · embedding
ollama pull bge-reranker-v2-m3    # 1.1 GB · reranker
ollama list
nvidia-smi  # ดู VRAM

7.6 Clone repo + Start SBOS

copymkdir C:\workspace ; cd C:\workspace
git clone https://github.com/wt-phatchara/operator-os.git

cd "C:\workspace\operator-os\Solopreneur Foundation"
# ⚠️ ต้อง copy .env ไฟล์ secret จาก laptop / Bitwarden ก่อน

$env:OPERATOR_SCENARIO = "S1"
$env:OPERATOR_PC_ROLE = "5080"

docker compose up -d

# Verify
curl http://localhost:8200/health
curl http://localhost:6333/collections

7.7 Firewall

copy$ports = @(8200, 3000, 1200, 6333, 8086, 11434, 8009)
foreach ($p in $ports) {
  New-NetFirewallRule -DisplayName "SBOS-$p (Tailscale)" -Direction Inbound `
    -InterfaceAlias "Tailscale" -Protocol TCP -LocalPort $p -Action Allow
}

7.8 Disable sleep + power plan

copypowercfg /change standby-timeout-ac 0
powercfg /change hibernate-timeout-ac 0
powercfg /setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c

7.9 Verify cross-PC

จาก laptop:

copycurl http://desktop-5080:11434/api/tags
curl http://desktop-5080:8200/health
curl http://desktop-5080:6333/collections

7.10 Checklist 5080

8.1 Pre-flight (เหมือนเดิม · hostname = i3-server)

copy# 1-3: update + admin verify + internet ping (เหมือนเดิม)

# 4. Hostname
Rename-Computer -NewName "i3-server" -Restart -Force

# 5-6: Tools (NO Python, NO NVIDIA · ใช้แค่ Git + Docker)
winget install --id Git.Git -e
winget install --id Docker.DockerDesktop -e

# 7: Git config
git config --global user.email "wt.inlife@gmail.com"
git config --global user.name "Phatchara"

8.2 Tailscale

copywinget install --id Tailscale.Tailscale -e
tailscale up --hostname=i3-server
# จด tailnet IP → ต้องเป็นชื่อ i3-server (i3.tailnet) ตามที่อื่นอ้าง

8.3 Storage hub stack

copymkdir C:\workspace\storage-hub
cd C:\workspace\storage-hub

@'
services:
  postgres:
    image: timescale/timescaledb:latest-pg16
    container_name: shared-pg
    ports: ["5432:5432"]
    environment:
      POSTGRES_USER: operator
      POSTGRES_PASSWORD: ${PG_PASSWORD}
    volumes: ["./pgdata:/var/lib/postgresql/data"]
    restart: unless-stopped

  portainer:
    image: portainer/portainer-ce:latest
    container_name: portainer
    ports: ["9443:9443"]
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./portainer-data:/data
    restart: unless-stopped

  uptime-kuma:
    image: louislam/uptime-kuma:1
    container_name: uptime-kuma
    ports: ["3001:3001"]
    volumes: ["./kuma-data:/app/data"]
    restart: unless-stopped
'@ | Set-Content docker-compose.yml

"PG_PASSWORD=$(New-Guid)" | Set-Content .env

docker compose up -d
docker ps

8.4 Firewall

copy$ports = @(5432, 9443, 3001)
foreach ($p in $ports) {
  New-NetFirewallRule -DisplayName "Storage-$p (Tailscale)" -Direction Inbound `
    -InterfaceAlias "Tailscale" -Protocol TCP -LocalPort $p -Action Allow
}

8.5 Setup Uptime Kuma

1. เปิด http://i3-server:3001 จาก laptop
2. Create admin account (first-time)
3. Add HTTP(s) monitors:
   • SBOS: http://desktop-5080:8200/health
   • Ollama heavy: http://desktop-5080:11434/api/tags
   • l2-hub: http://desktop-2060:8100/health
   • LiteLLM: http://desktop-2060:4000/health/liveliness
   • Ollama light: http://desktop-2060:11434/api/tags

8.6 Disable sleep

copypowercfg /change standby-timeout-ac 0
powercfg /change hibernate-timeout-ac 0

8.7 Checklist i3

9.1 Pre-flight (hostname = i5-flash)

copy# Standard pre-flight
Install-Module PSWindowsUpdate -Force -Scope CurrentUser
Install-WindowsUpdate -AcceptAll -AutoReboot

ping login.tailscale.com
ping github.com

Rename-Computer -NewName "i5-flash" -Restart -Force

# Tools (Python + Git + PlatformIO · NO Docker · NO NVIDIA)
winget install --id Python.Python.3.12 -e
winget install --id Git.Git -e
pip install platformio
pio --version

9.2 Tailscale

copywinget install --id Tailscale.Tailscale -e
tailscale up --hostname=i5-flash

9.3 Enable SSH server

copyAdd-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0
Start-Service sshd
Set-Service -Name sshd -StartupType 'Automatic'
New-NetFirewallRule -DisplayName "SSH (Tailscale)" -Direction Inbound `
  -InterfaceAlias "Tailscale" -Protocol TCP -LocalPort 22 -Action Allow

9.4 Clone firmware repos

copymkdir C:\firmware
cd C:\firmware
git clone https://github.com/wt-phatchara/SpotWelder_SuperCap_PoC.git
git clone https://github.com/wt-phatchara/JumpStarter_SuperCap_PoC.git
git clone https://github.com/wt-phatchara/HybridPack_SuperCap_PoC.git
git clone https://github.com/wt-phatchara/Zircon_SMOOTH1_UPS_PoC.git

9.5 Verify from laptop

copy# จาก laptop:
ping i5-flash
ssh i5-flash
# ครั้งแรกจะถาม fingerprint → yes

9.6 Checklist i5

10. End-to-End Verify

ทำที่ laptop หลังทุก PC setup ครบ

10.1 All 5 PCs alive

copytailscale status
# ต้องเห็น 5 entries:
#   laptop-jaao · desktop-2060 · desktop-5080 · i3-server · i5-flash
# สถานะ "active"

10.2 Service health (cross-PC)

copy# 2060
curl http://desktop-2060:8100/health
curl http://desktop-2060:4000/health/liveliness
curl http://desktop-2060:11434/api/tags

# 5080
curl http://desktop-5080:8200/health
curl http://desktop-5080:6333/collections
curl http://desktop-5080:11434/api/tags

# i3
curl http://i3-server:3001/api/status-page

# i5
ssh i5-flash "pio --version"

10.3 Routing through l2-hub

copy# Test that l2-hub routes to 5080 Ollama
curl -X POST http://desktop-2060:8100/route `
  -H "Content-Type: application/json" `
  -d '{"task":"code","prompt":"say hi"}'

Checklist

11. PMF Mining Run

Script: C:/Users/JA/Documents/research/ollama_mine.py (บน laptop) · target = Ollama บน 5080

Path A: Run on 5080 (recommend)

copycd C:\workspace\operator-os\research
git pull

# Smoke test 1 file ก่อน
$env:PMF_LIMIT = "1"
python ollama_mine.py

# Full overnight run
Remove-Item Env:\PMF_LIMIT -ErrorAction SilentlyContinue
Start-Process -NoNewWindow python `
  -ArgumentList "ollama_mine.py" `
  -RedirectStandardOutput "mine.log" `
  -RedirectStandardError "mine.err"

Path B: Run from laptop, via Tailscale

copycd C:\Users\JA\Documents\research
$env:OLLAMA_HOST = "http://desktop-5080:11434"
python ollama_mine.py

12. Monitor

From laptop ผ่าน SSH

copyssh desktop-5080

# Tail log
Get-Content C:\workspace\operator-os\research\_pmf_ollama_mining.log -Wait -Tail 50

# File count
type C:\workspace\operator-os\research\_pmf_ollama_progress.json | python -c "import sys,json; d=json.load(sys.stdin); print(f'{len(d.get(\"processed\",[]))} / 47')"

# Idea count
type C:\workspace\operator-os\research\_pmf_ollama_ideas.json | python -c "import sys,json; d=json.load(sys.stdin); print(f'{len(d)} ideas')"

# GPU
nvidia-smi

Via Uptime Kuma

เปิด http://i3-server:3001 · ดู status page

13. Troubleshoot

Tailscale

Ollama

Docker

Git pull conflict

14. Reference

Hostname → Services

Env vars

Common commands cheat sheet

copy# Tailscale
tailscale status              # who's on tailnet
tailscale ip -4               # my IP
tailscale ping desktop-5080   # diagnostic

# Ollama
ollama list                   # installed models
ollama ps                     # loaded in VRAM
ollama run qwen2.5:14b        # chat
curl http://HOST:11434/api/tags

# Docker
docker ps                     # running containers
docker logs CONTAINER -f      # tail logs
docker compose up -d          # start all
docker compose down           # stop all

# Service health from laptop
curl http://desktop-2060:8100/health    # l2-hub
curl http://desktop-5080:8200/health    # SBOS
curl http://i3-server:3001              # Kuma

# Power (admin)
powercfg /query | findstr Sleep
powercfg /change standby-timeout-ac 0

Spec references

• Full spec v10: C:/Users/JA/Documents/specs/2026-06-13-v10-master-parts/21-hardware-scenario-flexibility.md
• Pin map: specs/2026-05-24-v9-master-parts/03-pin-maps.md
• Port registry: Documents/CLAUDE.md §12.2

v3 Beginner Edition · Phatchara Operator OS · 2026-06-17
Public: ollama-setup-guide.pages.dev