Auto-commit: 2025-12-21 22:33 session changes
This commit is contained in:
@@ -122,7 +122,7 @@ All `*.kavcorp.com` subdomains route through Traefik reverse proxy (10.4.2.10) f
|
|||||||
**Required pm4 vmbr0 Configuration**:
|
**Required pm4 vmbr0 Configuration**:
|
||||||
- `bridge-vlan-aware yes` in /etc/network/interfaces
|
- `bridge-vlan-aware yes` in /etc/network/interfaces
|
||||||
- VLANs 10, 20, 30 added to eno1: `post-up bridge vlan add dev eno1 vid {10,20,30}`
|
- VLANs 10, 20, 30 added to eno1: `post-up bridge vlan add dev eno1 vid {10,20,30}`
|
||||||
- VLANs 10, 20, 30 added to veth103i0 (Pi-hole): Manual after LXC start
|
- VLANs 10, 20, 30 added to veth103i0 (Pi-hole): via hookscript `local:snippets/pihole-vlan.sh`
|
||||||
|
|
||||||
**Pi-hole Configuration** (LXC 103):
|
**Pi-hole Configuration** (LXC 103):
|
||||||
- `listeningMode = "ALL"` in /etc/pihole/pihole.toml (to accept DNS from all subnets)
|
- `listeningMode = "ALL"` in /etc/pihole/pihole.toml (to accept DNS from all subnets)
|
||||||
|
|||||||
@@ -12,7 +12,6 @@ None currently.
|
|||||||
- [ ] Disable DHCP on Asus router and switch LAN to OPNsense DHCP
|
- [ ] Disable DHCP on Asus router and switch LAN to OPNsense DHCP
|
||||||
- [ ] Test firewall isolation (IoT device cannot ping LAN device)
|
- [ ] Test firewall isolation (IoT device cannot ping LAN device)
|
||||||
- [ ] Test Smart Home access (Home Assistant can reach IoT devices)
|
- [ ] Test Smart Home access (Home Assistant can reach IoT devices)
|
||||||
- [ ] Add Pi-hole veth VLAN membership to LXC hookscript for persistence
|
|
||||||
|
|
||||||
### Future Network Upgrades
|
### Future Network Upgrades
|
||||||
- [ ] Order hardware (2× GiGaPlus 10G PoE, 2× U7 Pro) for 10G backhaul
|
- [ ] Order hardware (2× GiGaPlus 10G PoE, 2× U7 Pro) for 10G backhaul
|
||||||
|
|||||||
Reference in New Issue
Block a user