UniFi live captures¶
Read-only snapshots from uv run python -m scripts.labctl unifi dump (via
infra-services /etc/homelab/labctl.env). Secrets are redacted before commit
(WLAN passphrases, device auth keys, IPsec PSK, guest tokens, syslog keys).
| Artifact | Captured | Notes |
|---|---|---|
| unifi-dump-2026-08-09.sanitized.json | 2026-08-09 | Network 10.5.67; 146 ZBF policies; 51 clients; 6 UniFi devices. Companion policy 10010 and its derived return path were normalized after final validation to the required 11434,8091 ports; legacy 1234 remains only on the separate .17 LLM path. |
Docs derived from this capture:
- firewall-live.md
- network-live.md
- Appliance pages under docs/appliances/
Regenerate:
# on infra-services
set -a && . /etc/homelab/labctl.env && set +a
uv run python -m scripts.labctl unifi dump > /tmp/unifi-dump.json
Then sanitize (strip secrets / slim clients) before committing under this folder.