Check-in — 2026-06-19¶
Superseded
See 2026-06-20 check-in for current open actions and Aqara / JD2 / PiHole decom status.
Post–Phase 7 milestone: DNS authoritative on AdGuard, Tailscale on four core nodes, ACL GitOps green, full documentation audit with validation evidence.
Evidence bundle: 2026-06-19-documentation-validation.md
TL;DR (snapshot at 2026-06-19)¶
Phase 7 core was done except PiHole soak/decom and optional manual Tailscale hosts. Documentation audit corrected stale README and Phase 7 tables.
Phase status (2026-06-19)¶
| Phase | Theme | Status | Notes |
|---|---|---|---|
| 7 | Network + ACLs + DNS | Core done | ZBF, WiFi, DSM/Tailscale, AdGuard cutover, ACL sync |
| 7R | ZBF remediation | Partial | Printer ✅; HomePod AirPlay rule live; WiFi moves ⏸ |
| 6 | Backup & DR | Deployed | backup-client on infra-services |
| 8+ | SIEM, consolidation | Not started | — |
What changed since 2026-06-17 check-in¶
DNS¶
- UDM WAN + VLAN DHCP →
192.168.6.17(AdGuard) - Rewrites + Unbound upstream working; verified from saltierpoop and off-LAN subnet route
- PiHole soak pending at time of this entry (decom completed 2026-06-17)
Tailscale¶
| Host | Status |
|---|---|
| infra-services | Subnet router 192.168.6.0/24 approved |
| prox | proxbox-cube @ 100.97.134.65 |
| saltierpoop | Online |
| whrrr | DSM; off-LAN DSM test passed |
| haos / recordurbate / ubuncap | Not deployed (optional) |
ACL GitOps¶
- GitHub secrets + workflow fix (
action: apply, no"comment"inacl.json) - Run 27811413868 succeeded
Documentation¶
- Full audit; validation evidence committed
- Repeatable procedure: documentation-validation.md
Live stack (unchanged spine)¶
GitOps on infra-services, Komodo polling, Traefik ingress, monitoring stack,
mkdocs → Cloudflare Pages. See 2026-06-17 check-in for
phase 0–6 detail.