Commit Graph

126 Commits

Author SHA1 Message Date
Kaloyan Danchev
4e726a4963 Add cross-VLAN casting docs, update device assignments
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- New doc: 11-CROSS-VLAN-CASTING.md with full MikroTik config
  (firewall rules, FastTrack exclusion, mDNS, IGMP proxy,
  AirPlay/Chromecast troubleshooting)
- Update device IPs: LG TV .40/.41, Chromecast .42
- Move HP printer from VLAN 40 to VLAN 30 at .30

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-13 18:28:55 +02:00
Kaloyan Danchev
ecbce1ca94 Add VRRP failover infrastructure documentation (Nobara)
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Deployed automatic failover for critical services (Traefik, Vaultwarden,
Authentik, AdGuard) from Unraid to Nobara workstation via Keepalived VRRP
with VIP 192.168.10.250. ~4 second failover time.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-13 18:03:26 +02:00
Kaloyan Danchev
d2f49e9130 Add Vaultwarden sync script for MikroTik cold standby
Syncs the Vaultwarden database, RSA key, and config from Unraid
to the MikroTik container standby instance via a temporary PHP
HTTP server. Designed for manual daily runs before maintenance.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-11 11:21:24 +02:00
Kaloyan Danchev
4305657ad0 Add Bosch Home Connect integration to HA setup docs
Oven (HRG7784B1) and Washing Machine (WGB24400BY) added via OAuth2.
Both dashboards updated with Bosch appliance sections.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-08 19:23:46 +02:00
Kaloyan Danchev
5af3c9478b Add Home Assistant setup documentation
Covers HAOS VM setup, Xiaomi/Gree/Tuya integrations, visionOS theme,
Mushroom Cards dashboards (mobile + desktop), and known issues.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-08 11:30:17 +02:00
Kaloyan Danchev
c93f7da733 Add Unraid flash drive migration procedure
Flash drive on XTRM-U is failing. Created incident doc with complete
step-by-step procedure: backup retrieval (4 options), new USB prep via
Flash Creator, license transfer via Tools→Registration, post-migration
verification checklist, and prevention measures.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-06 15:14:43 +02:00
Kaloyan Danchev
ec9659d0cb Restructure docs: archive VLAN migration, update IPs to VLAN 10
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Major documentation cleanup after VLAN migration completion:
- Archive 12 VLAN project docs to archive/vlan-migration/
- Archive 5 done WIP docs (VLAN proposals, AI stack, Fossorial, DNS backup)
- Create standing reference docs 08-DNS-ARCHITECTURE and 09-TAILSCALE-VPN
- Renumber docs to clean 01-09 sequence with merged CHANGELOG
- Update all active docs from stale 192.168.31.x to current VLAN 10 IPs
- Fix CSS1 (.10.9→.10.3) and ZX1 (.10.7→.10.4) IPs in hardware inventory
- Clean 06-VLAN-DEVICE-ASSIGNMENT: remove migration columns/sections, fix VLAN 25 subnet

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-06 12:45:16 +02:00
Kaloyan Danchev
81f2f03400 Replace Portainer with Dockge for container management
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Remove Portainer, add Dockge on port 5001
- Add project-specific CLAUDE.md with infrastructure instructions
- Update services documentation

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-06 08:01:42 +02:00
Kaloyan Danchev
60369e6f43 Add Settop Box to VLAN 30 device list
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- LAN MAC: FC:D5:D9:EB:6A:82 → 192.168.30.50 (CSS326 Port 23)
- WiFi MAC: 08:FB:EA:61:9D:3A → 192.168.30.51 (XTRM2 2.4GHz)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 15:56:12 +02:00
Kaloyan Danchev
740170a164 Add Roborock S7 to WPA+TKIP device list
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Fixed XTRM2 WiFi by enabling WPA-PSK + WPA2-PSK and setting
fixed channel 2412 MHz (channel 1) with 20MHz width.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 13:52:52 +02:00
Kaloyan Danchev
c1ab68f499 Update CSS326 switch configuration with port labels
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Configured VLANs 10, 20, 25, 30 on CSS326 via SwOS API
- Added port labels: HAP-Trunk, KVM-V10, Kids-B1/B2/G1, Main-M1/M2/M3, LR-L1/L2/L3, ZX1-10G
- Updated port assignments table with detailed per-port configuration

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 13:39:16 +02:00
Kaloyan Danchev
5b8c8b72ec Add CSS326 port assignments with VLAN mapping
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Port 1: HAP Uplink (Trunk)
- Port 2: KVM (VLAN 10)
- Ports 16-18: Kids Rooms (VLAN 25)
- Ports 19-21: Main Bedroom (VLAN 20)
- Ports 22-24: Living Room (VLAN 30, includes settop box)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 12:14:36 +02:00
Kaloyan Danchev
76106664a7 Update HAP ax³ port assignments documentation
- ether1: ISP Gateway (WAN)
- ether2: CAP XL ac
- ether3: CSS326-24G-2S+
- ether4: XTRM-U (Unraid)
- ether5: Dell Monitor LAN

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 11:27:18 +02:00
Kaloyan Danchev
6ba0f4c14f Add Kaloyan's device MAC addresses
- USB Hub: 34:0A:33:2C:1E:28
- MacBook Pro WiFi 5GHz: BE:A7:95:87:19:4A
- MacBook Pro WiFi 2.4GHz: CE:B8:11:EA:8D:55

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 09:19:38 +02:00
Kaloyan Danchev
7e03532700 Identify Tuya Smart Gateway (JMWZG1) MAC address
- 38:1F:8D:04:6F:E4 is the Tuya Smart Gateway, not Xiaomi
- New IP: 192.168.30.5
- Requires WPA+TKIP for connectivity

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 09:14:16 +02:00
Kaloyan Danchev
b7c998121e Reorganize VLAN 20/25 device assignments
- VLAN 20 (Trusted): Kaloyan's devices only (S25, MacBook, Gaming PC, USB Hub)
- VLAN 25 (Family): All other family members (Nora, Dancho, Kimi, Compusbg)
- Dell Monitor LAN moved to VLAN 10 (connected to HAP ether5)
- Added TBD section for USB Hub and Gaming PC WiFi MACs

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 09:05:02 +02:00
Kaloyan Danchev
5608c45e05 Update Dell Monitor LAN device with new VLAN assignment
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Renamed MacBook Pro LAN to Dell Monitor LAN
- Assigned to VLAN 10 (Management) with IP 192.168.20.100

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-01 21:51:47 +02:00
Kaloyan Danchev
9a6b725a14 Add device migration worksheet with all devices by VLAN
Includes columns for new VLAN and new IP planning:
- 36 devices across 7 VLANs
- Organized by VLAN section and flat list views
- Ready for migration planning

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-01 20:28:28 +02:00
Kaloyan Danchev
0c492d016c Add WiFi/CAPsMAN config and fix Xiaomi OUI misidentification
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Created docs/19-WIFI-CAPSMAN-CONFIG.md documenting working WiFi settings
- Fixed 38:1F:8D:04:6F:E4 OUI - was incorrectly labeled as Tuya, is actually Xiaomi
- XTRM2 (2.4GHz) requires WPA+WPA2 with TKIP for legacy device compatibility
- CAPsMAN working with CAP XL ac on 2.4GHz

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-01 20:14:44 +02:00
546adad373 Restore HID++ for Nobara->Mac, keep Mac->Nobara monitor-only 2026-02-01 18:31:49 +02:00
663542ff17 Simplify KVM scripts - monitor only, manual peripheral switch
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-02-01 16:42:04 +02:00
Kaloyan Danchev
2a3bdb9934 Fix KVM switch: working Nobara → Mac with correct HID++ commands
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Discovered correct HID++ feature indices per device
- Updated to_mac.sh with working hidapitester commands
- Updated docs with complete setup instructions
- Mac → Nobara direction still needs work (TODO)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-01 13:38:17 +02:00
2d67ba5cb5 Add KVM scripts for Mac/Nobara switching
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- to_mac.sh: Switch from Nobara to Mac (monitor USB-C, peripherals Ch3)
- to_nobara.sh: Switch from Mac to Nobara (monitor HDMI2, peripherals Ch2)
- README.md: Setup instructions for both machines

Uses DDC/CI for monitor and HID++ for Logitech Bolt peripherals.
2026-02-01 11:46:24 +02:00
0c50f7088c Update changelog: KVM switch documentation added
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-01 09:44:36 +02:00
0d0131d2b2 Add KVM switch documentation for Mac/Nobara setup
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- DDC/CI monitor switching (Dell U3821DW)
- HID++ Logitech peripheral switching (MX Keys S, MX Master 3S)
- Scripts for bidirectional switching
- Troubleshooting guide and reference

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-01 09:44:20 +02:00
b95ba0f444 fix: resolve DNS issues - update DHCP to use gateway as DNS 2026-01-31 23:25:56 +02:00
886f46bd77 docs: log network connectivity issue
docs: add Docker cleanup changelog + log network issue (2026-01-31)
2026-01-31 23:11:05 +02:00
Kaloyan Danchev
7470d3f502 Update documentation with correct VLAN IPs
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Hardware Inventory:
- Unraid server: 192.168.10.20
- Unraid AdGuard (macvlan): 192.168.10.10
- Router: 192.168.10.1
- CSS326 switch: 192.168.10.9
- ZX switch: 192.168.10.7
- cAP XL: 192.168.10.6

Critical Services:
- Updated DNS section with correct container IPs
- Added failover details and Web UI URLs
- Updated routing to reflect VLAN structure
- Updated DHCP pools for all VLANs

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-31 22:22:10 +02:00
Kaloyan Danchev
f56a43741d Update DNS failover with dual health check
- Added DNS resolution Netwatch monitor (type=dns) alongside ping
- Ping check: Fast container crash detection (10s interval)
- DNS check: Actual DNS functionality verification (30s interval)
- Either monitor failing triggers failover to Unraid
- Documented /32 routing fix for multi-container ECMP issue
- Updated troubleshooting section with routing checks

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-31 20:52:49 +02:00
Kaloyan Danchev
d34cea9df6 Add MikroTik Tailscale container documentation
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Documents the Tailscale container setup on MikroTik hAP ax³:
- Userspace networking mode (TS_USERSPACE=true) required for RouterOS containers
- Container network configuration (172.17.0.0/24)
- NAT masquerade for internet access
- Environment variables and mount configuration
- Troubleshooting guide for common issues

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-31 18:43:27 +02:00
Kaloyan Danchev
4b766145b4 Add AdGuard DNS setup with automatic failover documentation
- docs/16-ADGUARD-VLAN-PLAN.md: Implementation plan for AdGuard on VLANs
- docs/17-DNS-ADGUARD-FAILOVER.md: Complete DNS architecture with:
  - Dual AdGuard setup (MikroTik primary, Unraid secondary)
  - Automatic failover via Netwatch monitoring
  - NAT redirect rules for all VLANs
  - Sync configuration between instances
- docs/wip/CONSOLE-PORT-ETHER5.md: WIP plan for dedicated console port

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-31 17:22:18 +02:00
Kaloyan Danchev
70fa8c0654 Update port forwards and IPs for VLAN 10 setup
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Updated NAT port forwards to use 192.168.10.20 (Unraid on VLAN 10)
- Added hairpin NAT rules for internal access to WAN IP
- Updated SSH connection commands
- AdGuard DNS rules pending (not configured yet)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-31 13:06:02 +02:00
Kaloyan Danchev
0c27218091 Update NanoKVM IP to 192.168.10.200
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-31 13:06:02 +02:00
Kaloyan Danchev
e9572ae166 Add VLAN setup documentation - complete implementation
- docs/12-VLAN-SETUP-PROGRESS.md: Progress tracking during setup
- docs/13-VLAN-SETUP-PLAN-V2.md: Initial VLAN plan
- docs/14-VLAN-SETUP-PLAN-V3-SAFE-MODE.md: Safe mode approach
- docs/15-VLAN-SETUP-COMPLETE-2026-01-31.md: Final session summary

VLANs implemented:
- VLAN 10: Management (192.168.10.0/24) - port-based
- VLAN 20: Trusted (192.168.20.0/24) - WiFi MAC-based
- VLAN 25: Kids (192.168.25.0/24) - WiFi MAC-based
- VLAN 30: IoT (192.168.30.0/24) - WiFi MAC-based
- VLAN 40: Catch-All (192.168.1.0/24) - default

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-31 13:05:33 +02:00
380dc84d61 VLAN filtering rolled back - ZX1 needs physical reconfiguration
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-27 08:00:42 +02:00
2ca4b7051c VLAN filtering activated successfully on MikroTik
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-26 21:21:46 +02:00
184773a24f docs: Update AI stack future plans - N5 Air with Ryzen AI 5 255
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 20:39:18 +02:00
4066e7ff3a docs: Complete local AI stack documentation
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Deployed Ollama + Open WebUI on Unraid
- Created custom unraid-assistant model with full infrastructure knowledge:
  - Network topology (8 VLANs, all IPs/gateways)
  - 45+ Docker containers with ports and purposes
  - RouterOS 7 commands and VLAN patterns
  - Traefik labels and Authentik SSO middleware
  - All xtrm-lab.org external URLs
- Added /usr/local/bin/ai terminal helper command
- Documented RAM optimization (stopped 5 containers)
- Added future upgrade notes for Mac Mini M4

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 20:38:06 +02:00
aee91fcc4b docs: Add AI stack deployment to changelog
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-26 15:57:03 +02:00
a80415f66b docs: Update LOCAL-AI-STACK.md with deployment status
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
- Ollama and Open WebUI deployed and running
- qwen2.5-coder:7b model installed (4.7GB)
- Intel GPU passthrough enabled
- Stopped non-critical containers for RAM
- Added docker commands and usage instructions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 15:56:48 +02:00
5982e4c444 VLAN: Fixed DNS/NAT issues, ready for activation
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Issues fixed after first activation attempt:
- DHCP DNS now points to each VLAN gateway
- DNS redirect rules cover all VLANs
- VLAN interfaces added to LAN firewall list
- NAT masquerade for VLAN→AdGuard traffic

CSS326 switch configured via SwOS.
MikroTik backup saved.
Ready to enable VLAN filtering when convenient.
2026-01-26 13:38:26 +02:00
a022d49c78 VLAN Phase 1 Complete: Added VLAN 25, configured 44 devices
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Added VLAN 25 (Kids) infrastructure on MikroTik
- Fixed all VLAN device leases to match assignment document
- Added newly discovered devices (XTRM-Ally, Dancho Windows, lwip0 IoT)
- Updated device assignment doc with 44 total devices
- Updated implementation doc with Phase 1 complete status
- Updated changelog with all changes

VLANs configured: 10, 20, 25, 30, 35, 40, 50
Next: CSS326 switch configuration
2026-01-25 21:26:41 +02:00
Kaloyan Danchev
8757bccca0 Add VLAN migration plan with Unraid transition strategy
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-25 20:34:15 +02:00
Kaloyan Danchev
d931d607b0 Move unknown/unidentified devices to VLAN 50 (Guest)
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-25 20:29:54 +02:00
Kaloyan Danchev
de65a69334 Fix LG TV WiFi MAC and IP (DC:03:98:6B:5A:3A @ .118)
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-25 20:21:49 +02:00
359c0819c3 Add quick VLAN assignment table for identified devices
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
2026-01-25 19:39:50 +02:00
27853d5581 Identify unknown devices via MAC OUI lookup
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- 50:2C:C6 = GREE Electric (AC/appliance) → VLAN 30
- 18:DE:50, 38:1F:8D = Tuya Smart (IoT) → VLAN 30
- D4:AD:FC = Shenzhen Intellirocks → VLAN 30
- AC:87:A3 = Apple Inc. → VLAN 20
- 22:4C:7F = Locally Administered (random MAC) → VLAN 20
- D0:C9:07 = Private vendor → VLAN 30 (assumed IoT)

All 35 devices now categorized.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-25 19:37:58 +02:00
7feabbbedf Add comment column to all tables in VLAN assignment doc
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-25 19:34:20 +02:00
f4f715d3f7 Add VLAN device assignment map with all IP/MAC addresses
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Complete inventory of 35 devices
- Organized by target VLAN (Mgmt, Trusted, IoT, Cameras, Servers)
- 8 unknown devices flagged for identification
- MAC address quick reference for switch configuration

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-25 19:31:04 +02:00
bdd8e210aa Fix ZX1 switch IP address in documentation
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Actual IP: 192.168.31.22 (was documented as .7)
- Verified via ARP table and web interface access

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-25 19:29:31 +02:00