Commit Graph

58 Commits

Author SHA1 Message Date
4bfbe63a38 Update debug: server-side tests pass, may be client caching 2026-01-25 13:48:57 +02:00
928c02c6f0 Update incident: Netflix domains whitelisted in AdGuard 2026-01-25 13:44:54 +02:00
a3a9b58377 Update incident: Fixed NAT redirect to correct AdGuard IP/port 2026-01-25 13:35:03 +02:00
b0f78c5022 Update incident: DHCP DNS fix for device connectivity 2026-01-25 13:27:26 +02:00
776372a0b9 Add incident report: DNS outbound blocked after MikroTik restart (2026-01-25) 2026-01-25 13:17:04 +02:00
de42738775 Add WIP docs for incomplete planned items
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
New WIP documents:
- FOSSORIAL-TUNNELS.md - Pangolin/Gerbil self-hosted tunnels (not deployed)
- VLAN-SEGMENTATION.md - Network segmentation plan (not implemented)
- REMOTE-GAMING.md - Sunshine/Moonlight streaming (in progress)

Changes:
- Renamed 05-CHANGELOG.md → 00-CHANGELOG.md
- Updated wip/README.md with all planned items

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-25 11:25:46 +02:00
b250493d5a Major documentation restructure - consolidated docs
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
New Structure:
- 01-NETWORK-MAP.md - Network topology, IPs, Docker networks, services
- 02-SERVICES-CRITICAL.md - DNS, Auth, Routing (P0/P1 services)
- 03-SERVICES-OTHER.md - All non-critical services
- 04-HARDWARE-INVENTORY.md - Physical devices and specs
- 05-CHANGELOG.md - Major events only

New Folders:
- docs/archive/ - Legacy docs (read-only reference)
- docs/wip/ - Planned changes and ideas
  - UPGRADE-2026-HARDWARE.md - N5 Air + N100 migration plan
  - GITOPS-CONTAINERS.md - Phase 2 container GitOps

Changes:
- Moved all 22 legacy docs to archive/
- Consolidated container IPs, physical map, and services into single network map
- Extracted critical vs non-critical service classification
- Simplified changelog to major events only

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-25 11:17:33 +02:00
ed17dea2d6 Add rack shelf entries for U9, U7 (10" rack) and U3 (19" rack)
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Added 10" Rack Shelf at U9 holding ISP Gateway
- Added 10" Rack Shelf at U7 holding ZX1
- Added 19" Rack Shelf at U3 holding HAP1
- Updated mermaid diagrams to show shelves
- Updated rack layout tables with shelf devices

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-25 10:07:51 +02:00
8c553107f9 Update device names to match NetBox naming convention
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- HAP → HAP1 | hAP ax³
- CSS326 → CSS1 | CSS326-24G-2S+
- 2.5GbE Switch → ZX1 | ZX-SWTGW218AS
- ISP Gateway → IGP Fiber Gateway (Vivacom)
- CAP-XL-ac → CAP | cAP XL ac
- Updated all tables, topology diagram, and IP allocation
2026-01-25 09:40:07 +02:00
7cf54805b5 Fix network map inconsistencies, add detailed topology diagram, document NetBox plugins
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Fix ZX1-3 port reference (PP2-2, XU2)
- Fix CSS1-2 connection to KVM1
- Fix CSS326 PP1 port references (19-24)
- Fix CSS1-SFP1 to show ZX1 connection
- Fix CSS1-18 status (remove double check)
- Fix PP2 section title (U8)
- Add ZX1 to IP allocation table
- Regenerate topology diagram with backbone ports marked
- Add NetBox plugins documentation to current state
2026-01-25 09:28:55 +02:00
397c9a1db9 Add network physical map documentation
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-24 23:28:19 +02:00
d8307cfdf3 docs: Update infrastructure state with diagrams and cleanup
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-23 21:51:35 +02:00
58cbc0d6a8 docs: NetBox Redis consolidation to shared service
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-23 19:21:30 +02:00
375758a1dd docs: Diode stack consolidation to shared services
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-23 19:00:39 +02:00
e870bddac8 docs: Update for NetBox Discovery (Diode) setup and Slurpit removal
- Removed Slurpit section from current state (stack removed)
- Added NetBox Discovery (Diode) architecture documentation
- Added NetDisco to NetBox sync script documentation
- Updated network diagram with Diode components
- Added changelog entries for 2026-01-23

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-23 17:46:56 +02:00
682aceb8e0 Cleanup: Remove Pi-hole, add AdGuard Home Sync, add Uptime Kuma monitors
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Removed Pi-hole container (using MikroTik AdGuard Home as primary)
- Removed nebula-sync container (not in use)
- Added adguardhome-sync for rule syncing between MikroTik and Unraid AdGuard
- Added 27 monitors to Uptime Kuma for all services
- Updated container IP assignments
- Migrated NetBox to shared postgresql17

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-22 23:22:42 +02:00
fa15bec2d6 Migrate NetBox to shared postgresql17 and dockerproxy network
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Move NetBox database to shared postgresql17
- Move all NetBox containers to dockerproxy network
- Assign static IPs (172.18.0.61-64)
- Remove dedicated netbox network
- Update IP assignments documentation
2026-01-22 22:29:58 +02:00
01e8519639 Add switch web UI via Traefik at sw.xtrm-lab.org
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-22 21:43:24 +02:00
ac9038a189 Add Slurp'it network discovery setup and agent service accounts
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Enable SNMP on MikroTik router
- Configure SNMP v2c credentials (public, netdisco)
- Create agent service account on Unraid, router, AP
- Document network discovery stack (Slurp'it, NetDisco, NetBox)
- Update changelog with configuration changes
2026-01-22 20:08:16 +02:00
b19a777fad Update agent credentials - add AP with password auth
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-22 19:56:59 +02:00
ee25a44a2f Add agent service account credentials for Slurp'it
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-22 18:27:03 +02:00
9226e1494b docs: AdGuard Home migration - MikroTik persistence fix, Unraid replaces Pi-hole
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Fixed MikroTik AdGuard container persistence (disk1 root + usb1 mount)
- Deployed AdGuard Home on Unraid at 192.168.31.4 (replacing Pi-hole)
- Synced configuration: 6 clients, Quad9 DoH, TLS certs, filtering rules
- Added Mermaid diagrams for network topology and DNS architecture
2026-01-22 15:38:14 +02:00
4cd8caa27e Update infrastructure diagram with Mermaid diagrams 2026-01-22 14:28:26 +02:00
6b14a4dd9f Add comprehensive infrastructure diagram with all services, ports, and network topology
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-22 14:08:05 +02:00
09209bf863 docs: AdGuard Home on MikroTik - complete setup
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Replaced Pi-hole with AdGuard Home (172.17.0.5:5355)
- Configured DoH/DoT/DoQ with TLS certificates
- Added blocklists: StevenBlack, Hagezi Pro, Hagezi NSFW
- Added custom rules and 6 client devices
- Updated NAT rules for DNS redirect
- Documented MikroTik container root-dir bug
- Saved migration config for Unraid setup

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-22 11:44:24 +02:00
73d43d462e docs: migrate MikroTik DNS from Pi-hole to AdGuard Home
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Replaced Pi-hole container with AdGuard Home (172.17.0.5)
- Configured native DoH/DoT/DoQ with TLS certificates
- Updated DNS architecture diagram
- Updated NAT rules documentation
- Added encrypted DNS endpoints

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-22 07:53:02 +02:00
c85724f308 Add rclone cloud backup configuration and update flash backup path
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-21 21:44:05 +02:00
35234ef3ac Add Pi-hole version sync automation documentation
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-21 15:34:52 +02:00
266a45125a Update docs: Slurpit deployment, static IPs, Traefik fixes
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Added Slurpit server stack (6 containers) to infrastructure
- Updated service table with all current containers and static IPs
- Documented docker-compose managed stacks
- Added Slurpit, NetBox plugin fixes to changelog
- Fixed actual-budget and netbox Traefik routing
- Updated container IP assignments with Slurpit stack
2026-01-21 12:50:57 +02:00
80073c61d3 Update container IP assignments - add compose file locations and persistent config
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- All dockerproxy containers now have static IPs via Unraid templates
- NetBox, NetDisco, Gitea, Woodpecker, Pangolin use docker-compose with static IPs
- br0 macvlan containers have static IPs via templates
- Documented compose file locations for maintenance
- Removed housekeeping container (not functional)
2026-01-20 23:15:05 +02:00
b8cf34aedf Server recovery and static IP assignments
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Recovered from bzfirmware corruption on USB boot drive
- Assigned static IPs to all dockerproxy containers (172.18.0.x)
- Assigned static IPs to all netbox containers (172.24.0.x)
- Created comprehensive IP assignment documentation
- Rebuilt NetBox stack with correct network configuration

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-20 22:58:17 +02:00
0e35142e10 Phase 8: Enhanced network mapping with sync scripts
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Added MikroTik DHCP to NetBox sync script
- Installed Slurp'it plugin v1.2.7 in NetBox
- Enhanced NetDisco to NetBox sync with ARP/MAC data
- Enabled SNMP on Unraid server (4 devices now discoverable)
- Updated Phase 8 documentation with all scripts and configs

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-19 23:43:55 +02:00
1861a34ed8 Complete Phase 8: NetDisco Integration with NetBox
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Tasks completed:
- 8.1: SNMP configuration on MikroTik devices
- 8.2: NetDisco deployment
- 8.3: Discovery configuration
- 8.4: Traefik ingress with Authentik SSO
- 8.5: NetBox sync script
- 8.6: Testing and validation

Key fix: session_cookie_key manual insertion in database
2026-01-19 21:55:38 +02:00
1ddfc68192 Update Phase 8: Tasks 8.1-8.4 completed, document session_cookie_key fix
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-19 21:28:11 +02:00
a4e589b583 Fix: NetDisco web UI session_cookie_key error resolved
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-19 21:24:13 +02:00
544f641697 Complete Task 8.4: NetDisco Traefik ingress with Authentik SSO
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Added netdisco-secure router to Traefik dynamic.yml
- Protected with authentik-forward-auth middleware
- URL: https://netdisco.xtrm-lab.org
2026-01-19 20:52:21 +02:00
3953262455 Complete Task 8.2: NetDisco deployed and operational
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Database: netdisco_db in postgresql17 (schema v96)
- Containers: netdisco-web (port 5000), netdisco-backend
- All 3 MikroTik devices discovered via SNMP
- MAC/ARP data collection working
- Web UI: http://192.168.31.2:5000
2026-01-19 20:38:37 +02:00
75beb8bc4a Complete Task 8.1: SNMP enabled on all MikroTik devices
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- hAP ax³: SNMPv2c with netdisco community (192.168.31.2 only)
- cAP ac: SNMPv2c with netdisco community (192.168.31.2 only)
- CSS326: SNMPv2c with public community (SwOS limitation)
- All devices tested and responding to SNMP queries
- Updated Phase 8 status to IN PROGRESS
- Added SNMP config table to CURRENT-STATE.md
2026-01-19 20:13:58 +02:00
08b5258aa2 Add Phase 8: NetDisco Integration with NetBox
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Created 12-PHASE8-NETDISCO-INTEGRATION.md with full deployment plan
- Added NetDisco as planned service in CURRENT-STATE.md
- Documented MikroTik SNMP support (hAP ax3, CSS326, cAP ac)
- Added changelog entry for planning phase
- Decision: Keep NetAlertX running during transition
2026-01-19 19:03:18 +02:00
c8ea001e25 Add Unraid 4x2.5GbE NICs detail and future network improvements
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-19 09:51:06 +02:00
24184f5396 Update topology: CSS326 has direct 1G uplink to router
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-19 09:44:22 +02:00
20d17eb89d Add 2.5GbE managed switch and update network topology
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-19 09:41:30 +02:00
03c4017e69 Add NetBox data import draft from MikroTik ARP/DHCP
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-19 09:36:31 +02:00
83aca6ad7e Add NetBox DCIM/IPAM deployment to changelog
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-19 09:23:21 +02:00
e5bb0dbaf0 Move changelog to top: 06-CHANGELOG.md → 00-CHANGELOG.md
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-19 08:59:25 +02:00
33a87173e7 Phase 4: Updated doc with current progress and native install instructions
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-19 00:22:59 +02:00
jazzymc
9b68117144 Add NetBox IPAM/DCIM to infrastructure documentation
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
- Added NetBox and related containers to 00-CURRENT-STATE.md
- Added netbox.xtrm-lab.org to services list
- Updated FolderView2 categories (Monitoring + DevOps)
- Added deployment changelog entry for 2026-01-19

Services deployed:
- netbox (port 8090)
- netbox-worker
- netbox-housekeeping
- netbox-postgres
- netbox-redis
- netbox-redis-cache

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-19 00:21:18 +02:00
94eeceffd9 Phase 4: Document Nobara setup progress and Flatpak issues
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
2026-01-19 00:20:23 +02:00
jazzymc
0f3fda945f Add network asset inventory and management tool recommendations
- Created 11-NETWORK-ASSET-INVENTORY.md with full device inventory
- Documented 30+ devices from DHCP/ARP tables
- Categorized devices: Infrastructure, Secure, IoT, Kids
- Added MAC vendor reference table
- Recommended NetBox as primary IPAM/DCIM tool
- Listed alternative tools: phpIPAM, Snipe-IT, GLPI, etc.
- Added action items for unknown device identification

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-18 22:31:44 +02:00
jazzymc
72d4f52637 Add VLAN segmentation plan and CSS326 switch documentation
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Created 10-VLAN-NETWORK-SEGMENTATION.md with full VLAN plan
- Added CSS326-24G-2S+ SwOS switch to 00-CURRENT-STATE.md
- Documented switch credentials and web UI access
- Proposed 4 VLANs: Secure (10), IoT (20), Kids (30), Guest (40)
- Included cross-VLAN solution for S25 accessing IoT devices
- Added SwOS configuration steps for port VLAN assignments

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-18 22:20:17 +02:00