kavren
e6ad3bcf1d
OPNsense is now the sole DHCP server for LAN (10.4.2.0/24). 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2.2 KiB
2.2 KiB
Current Tasks
Last Updated: 2025-12-21
In Progress
None currently.
Pending
Remaining Network Tasks
- Disable DHCP on Asus router and switch LAN to OPNsense DHCP
- Test firewall isolation (IoT device cannot ping LAN device)
- Test Smart Home access (Home Assistant can reach IoT devices)
Future Network Upgrades
- Order hardware (2× GiGaPlus 10G PoE, 2× U7 Pro) for 10G backhaul
- Consider managed 2.5G PoE switches for proper VLAN support
- Consider OPNsense HA (CARP) with second USB NIC on another node
Media Organization
- Verify Jellyfin can see all imported media
- Clean up
.processing-loose-episodesfolder - Review and potentially restore TV shows from processing folder
Configuration
- Consider custom format to prefer English audio releases
- Review Sonarr language profiles for non-English releases
Infrastructure
- Define backup strategy and schedule
- Set up monitoring/alerting system
- Document disaster recovery procedures
Completed (Recent)
- OPNsense WAN cutover to AT&T modem (192.168.1.x)
- VLAN isolation working (Trusted, IoT, Guest)
- pm4 vmbr0 VLAN-aware with persistent bridge vlan config
- Pi-hole accepting DNS from all subnets (listeningMode=ALL)
- Pi-hole gateway set to OPNsense for return routing
- UniFi SSIDs configured with VLAN tags
- Configured OPNsense VLANs (10, 20, 30) on vtnet0
- Configured VLAN interfaces with IPs (10.4.10.1, 10.4.20.1, 10.4.30.1)
- Configured DHCP on all VLAN interfaces
- Implemented firewall rules for IoT/Guest isolation
- Added Traefik routes for UniFi Controller and OPNsense
- Resized Traefik LXC 104 rootfs from 2GB to 4GB
- Configured pm4 vmbr1 bridge with USB 2.5G NIC for OPNsense WAN
- Added net1 (vmbr1) to OPNsense VM 130
- Deployed UniFi Controller LXC 111 on pm4
- Fixed SSH access between cluster nodes (pm2 can access all nodes)
- Fixed NZBGet permissions (UMask=0000 for 777 files)
- Fixed Sonarr permissions (chmod 777 on imports)
- Fixed Jellyfin LXC mounts (restarted LXC)
- Fixed Jellyseerr IP in Traefik config
- Consolidated documentation structure
- Created documentation index
Blocked
None currently.