From 66763e3f10c2e7e38907adf3a7c55a9807c2921b Mon Sep 17 00:00:00 2001 From: kavren Date: Sun, 21 Dec 2025 22:33:16 -0500 Subject: [PATCH] Auto-commit: 2025-12-21 22:33 session changes --- docs/INFRASTRUCTURE.md | 2 +- docs/TASKS.md | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/docs/INFRASTRUCTURE.md b/docs/INFRASTRUCTURE.md index 5abee8c..a65437e 100644 --- a/docs/INFRASTRUCTURE.md +++ b/docs/INFRASTRUCTURE.md @@ -122,7 +122,7 @@ All `*.kavcorp.com` subdomains route through Traefik reverse proxy (10.4.2.10) f **Required pm4 vmbr0 Configuration**: - `bridge-vlan-aware yes` in /etc/network/interfaces - VLANs 10, 20, 30 added to eno1: `post-up bridge vlan add dev eno1 vid {10,20,30}` -- VLANs 10, 20, 30 added to veth103i0 (Pi-hole): Manual after LXC start +- VLANs 10, 20, 30 added to veth103i0 (Pi-hole): via hookscript `local:snippets/pihole-vlan.sh` **Pi-hole Configuration** (LXC 103): - `listeningMode = "ALL"` in /etc/pihole/pihole.toml (to accept DNS from all subnets) diff --git a/docs/TASKS.md b/docs/TASKS.md index e757744..1c593c6 100644 --- a/docs/TASKS.md +++ b/docs/TASKS.md @@ -12,7 +12,6 @@ None currently. - [ ] Disable DHCP on Asus router and switch LAN to OPNsense DHCP - [ ] Test firewall isolation (IoT device cannot ping LAN device) - [ ] Test Smart Home access (Home Assistant can reach IoT devices) -- [ ] Add Pi-hole veth VLAN membership to LXC hookscript for persistence ### Future Network Upgrades - [ ] Order hardware (2× GiGaPlus 10G PoE, 2× U7 Pro) for 10G backhaul