Built a claude-code-webui docker image: https://hub.docker.com/r/heywoodlh/claude-code-webui/ - It has (Determinate) Nix installed - It has

claude

CLI installed - Runs as an unprivileged

nix

user I have it running in my Kubernetes cluster and have it running the Telegram plugin so I can chat with it on other devices. The Telegram plugin is peak because you can remotely chat with it and also remotely approve/deny requests. I'll thread on this message with screenshots.

Nice! Do you have it doing anything in production?

Yeah, I gave it a dedicated GitHub account that it's now logged into. Gonna setup the GitHub MCP. I hope for it to help me with tedious tasks that I don't really want to do.

That's way coo.. So you assign it tasks to your repos and then it does a pull, and you can approve/deny on review? That sounds insanely useful.

It runs as an unprivileged user in a container so it shouldn't be able to do damage on my NixOS server/Kubernetes cluster unless it somehow it able to escape both unprivileged access and the container. Which, is not impossible, but would be incredibly complex and require a Kubernetes exploit.