docs: log network connectivity issue

docs: add Docker cleanup changelog + log network issue (2026-01-31)

docs/06-CHANGELOG.md

@@ -1,5 +1,23 @@
 # Infrastructure Changelog
 
+## 2026-01-31
+
+### Docker Cleanup
+- [DOCKER] Removed 18 unused images (~4.9 GB reclaimed)
+- [DOCKER] Removed 12 dangling images (old builds, untagged)
+- [DOCKER] Removed Slurpit stack images (warehouse, portal, scanner, scraper)
+- [DOCKER] Removed unused MongoDB 8 and MariaDB 11 images
+- [DOCKER] Removed 35 orphaned volumes (~1.15 GB reclaimed)
+- [DOCKER] Removed 28 anonymous dangling volumes
+- [DOCKER] Removed 6 nextcloud_aio_* volumes (from old AIO install)
+- [DOCKER] Removed orphaned redis-data volume
+- [DOCKER] **Total reclaimed: ~6 GB**
+
+### Kept (Stopped Containers)
+- open-webui, ollama (AI stack - for future use)
+- pgAdmin4 (database management)
+- diode-hydra-migrate, diode-auth-bootstrap (one-time migration jobs)
+
 ## 2026-01-27
 
 ### VLAN Filtering Rolled Back

docs/incidents/2026-01-31-network-connectivity.md

@@ -0,0 +1,43 @@
+# Network Connectivity Issue
+
+**Date:** 2026-01-31  
+**Status:** OPEN  
+**Severity:** Medium  
+
+## Symptoms
+
+- DNS resolution failing (8.8.8.8 timeout)
+- Cannot connect to local services via 192.168.31.2
+- curl to Gitea (port 3005) returns HTTP 000
+- Git push to Gitea failing
+
+## Affected Services
+
+- Git push to git.xtrm-lab.org
+- Potentially other services using external DNS
+
+## Observations
+
+- Gitea container is running (docker ps confirms)
+- Ports are mapped correctly (0.0.0.0:3005->3000)
+- Internal Docker IP: 172.18.0.31
+- Connections from Unraid shell to local IP timing out
+
+## Possible Causes
+
+- Docker bridge/macvlan network issue
+- iptables/firewall blocking internal traffic
+- VLAN configuration affecting local routing
+- DNS upstream issue
+
+## Workaround
+
+- Pending git commit saved locally: `dbe4699`
+- Push when network is restored: `cd /tmp/infrastructure && git push`
+
+## Next Steps
+
+- [ ] Check iptables rules
+- [ ] Verify Docker network configuration
+- [ ] Check AdGuard DNS upstream settings
+- [ ] Test connectivity from different network paths