I just gave it a dedicated `agent` user. So it's free to blow up its own files, but not mine.
(Looked into the docker stuff and realized the only thing I actually cared about was it reading/writing my files and that Unix solved that problem like 60 years ago)
I'm not hooking it up to my email, but I will probably give it its own account that I can forward stuff to.
For most people I think the appropriate way to run it is on a Raspberry Pi (or mac mini, as the trend goes :)
I realized I could fiddle with docker and have constant inconvenience and still stress about did I set it up right.. or just give it its own box (pi or VPS) for $5 and if it blows it up I just reset it.
Having Claude as my sysadmin there is fun too. I obviously wouldn't use that for anything serious though. But in a year or two, that might not even be such a bad idea. At this point reliability is really the missing feature.