add: Traefik routes for UniFi and OPNsense

- unifi.kavcorp.com → 10.4.2.242:8443
- opnsense.kavcorp.com → 10.4.2.1
- Resized Traefik LXC rootfs to 4GB (was 2GB, kept filling up)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

docs/CHANGELOG.md

@@ -4,6 +4,19 @@
 
 ## 2025-12-21
 
+### Traefik Updates
+- **UniFi Controller**: Added Traefik route
+  - Domain: unifi.kavcorp.com
+  - Backend: https://10.4.2.242:8443
+  - Config: `/etc/traefik/conf.d/unifi.yaml`
+
+- **OPNsense**: Added Traefik route
+  - Domain: opnsense.kavcorp.com
+  - Backend: https://10.4.2.1
+  - Config: `/etc/traefik/conf.d/opnsense.yaml`
+
+- **Traefik LXC 104**: Resized rootfs from 2GB to 4GB (was filling up repeatedly)
+
 ### OPNsense WAN Configuration
 - **pm4 vmbr1**: Created new bridge for OPNsense WAN interface
   - Physical NIC: enx6c1ff76e4d47 (USB 2.5G adapter)

docs/INFRASTRUCTURE.md

@@ -44,8 +44,8 @@
 | **Immich** | 10.4.2.24:2283 | LXC 126 (pm4) | immich.kavcorp.com | Built-in |
 | **Gitea** | 10.4.2.7:3000 | LXC 127 (pm4) | git.kavcorp.com | Built-in |
 | **Pi-hole** | 10.4.2.129 | LXC 103 (pm4) | pihole.kavcorp.com | Built-in |
-| **UniFi Controller** | 10.4.2.242:8443 | LXC 111 (pm4) | - | Built-in |
-| **OPNsense (KavSense)** | 10.4.2.1 | VM 130 (pm4) | - | Built-in (net0: vmbr0/LAN, net1: vmbr1/WAN) |
+| **UniFi Controller** | 10.4.2.242:8443 | LXC 111 (pm4) | unifi.kavcorp.com | Built-in |
+| **OPNsense (KavSense)** | 10.4.2.1 | VM 130 (pm4) | opnsense.kavcorp.com | Built-in (net0: vmbr0/LAN, net1: vmbr1/WAN) |
 | **KavNas** | 10.4.2.13 | Synology NAS | - | NAS auth |
 
 ## Storage Architecture