add: UniFi Controller LXC on pm4

Deployed for managing U7 AP in server closet testing.
IP: 10.4.2.242 (DHCP for now)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.claude/settings.local.json

@@ -0,0 +1,12 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(chmod:*)",
+      "Bash(ssh:*)",
+      "Bash(ping:*)",
+      "WebSearch"
+    ],
+    "deny": [],
+    "ask": []
+  }
+}

docs/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 > **Purpose**: Historical record of all significant infrastructure changes
 
+## 2025-12-19
+
+### Network Upgrade Progress
+- **UniFi Controller**: Deployed LXC on pm4 for AP management
+  - IP: 10.4.2.242 (DHCP, will be assigned static via OPNsense later)
+  - Port: 8443 (HTTPS web UI)
+  - Deployed via ProxmoxVE community helper script
+  - Purpose: Manage U7 AP installed in server closet for testing
+
 ## 2025-12-18
 
 ### Service Additions

docs/INFRASTRUCTURE.md

@@ -44,6 +44,7 @@
 | **Immich** | 10.4.2.24:2283 | LXC 126 (pm4) | immich.kavcorp.com | Built-in |
 | **Gitea** | 10.4.2.7:3000 | LXC 127 (pm4) | git.kavcorp.com | Built-in |
 | **Pi-hole** | 10.4.2.129 | LXC 103 (pm4) | pihole.kavcorp.com | Built-in |
+| **UniFi Controller** | 10.4.2.242:8443 | LXC (pm4) | - | Built-in |
 | **KavNas** | 10.4.2.13 | Synology NAS | - | NAS auth |
 
 ## Storage Architecture