diff --git a/.claude/settings.local.json b/.claude/settings.local.json
new file mode 100644
index 0000000..50162c7
--- /dev/null
+++ b/.claude/settings.local.json
@@ -0,0 +1,12 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(chmod:*)",
+      "Bash(ssh:*)",
+      "Bash(ping:*)",
+      "WebSearch"
+    ],
+    "deny": [],
+    "ask": []
+  }
+}
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index 844136d..91b75da 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -2,6 +2,15 @@
 
 > **Purpose**: Historical record of all significant infrastructure changes
 
+## 2025-12-19
+
+### Network Upgrade Progress
+- **UniFi Controller**: Deployed LXC on pm4 for AP management
+  - IP: 10.4.2.242 (DHCP, will be assigned static via OPNsense later)
+  - Port: 8443 (HTTPS web UI)
+  - Deployed via ProxmoxVE community helper script
+  - Purpose: Manage U7 AP installed in server closet for testing
+
 ## 2025-12-18
 
 ### Service Additions
diff --git a/docs/INFRASTRUCTURE.md b/docs/INFRASTRUCTURE.md
index 4ae5703..45e8e9f 100644
--- a/docs/INFRASTRUCTURE.md
+++ b/docs/INFRASTRUCTURE.md
@@ -44,6 +44,7 @@
 | **Immich** | 10.4.2.24:2283 | LXC 126 (pm4) | immich.kavcorp.com | Built-in |
 | **Gitea** | 10.4.2.7:3000 | LXC 127 (pm4) | git.kavcorp.com | Built-in |
 | **Pi-hole** | 10.4.2.129 | LXC 103 (pm4) | pihole.kavcorp.com | Built-in |
+| **UniFi Controller** | 10.4.2.242:8443 | LXC (pm4) | - | Built-in |
 | **KavNas** | 10.4.2.13 | Synology NAS | - | NAS auth |
 
 ## Storage Architecture