Check-in — Live network / firewall refresh (2026-08-09)¶
Short milestone note for PR3 (evidence-first UniFi + Prox live docs). Desk-side truth (PR2) and tooling pins (PR4) remain backlog.
TL;DR¶
Live UniFi dump (Network 10.5.67) and Prox scan are checked in under
docs/architecture/unifi-live/ and compute-live/. firewall-live /
network-live matrices now match the dump — including Personal → IoT.
Servers VLAN DHCP DNS still points at the gateway (drift vs AdGuard).
Phase status¶
| Area | Status |
|---|---|
| Live firewall / network docs | Refreshed from 2026-08-09 dump |
| Appliance pages (UDM/switches/APs/cams/Whrrr) | Expanded from dump + inventory |
| Prox compute-live | New prox-2026-08-09 (unknown LXC postgresql 102) |
| PLAN.md | Untouched |
| PR2 desk-side / PR4 pins | Still backlog |
What shipped¶
- Sanitized UniFi dump artifact + README
- Rewritten firewall-live.md (146 policies; Personal→IoT ALLOW in dump)
- Refreshed network-live.md (clients, DNS table, topology firmware)
- Appliance expansions under
docs/appliances/ - prox-2026-08-09 scan
Known gaps / drift¶
- Servers DHCP DNS =
192.168.6.1while other VLANs + WAN1 use AdGuard192.168.6.17 - Prox LXC postgresql (102) unknown to inventory (scan only — no auto-patch)
- Inventory YAML firmware fields lag some UniFi versions (docs updated; YAML not bumped in this PR)
What remains¶
| Owner | Agent / next PR |
|---|---|
| Merge this PR so docs site publishes | PR2 desk-side truth |
| Decide Servers DHCP DNS cutover | PR4 tooling pins |
| Inventory postgresql 102 if keep | — |
flowchart LR
dump["labctl unifi dump"] --> fw["firewall-live"]
dump --> net["network-live"]
dump --> apps["appliance pages"]
prox["proxmox-scan"] --> cl["compute-live"]
fw --> journal["this check-in"]
net --> journal
apps --> journal
cl --> journal