R-66: the box's own address becomes visible (v0.159.0)

Leg A: „Hálózat" card on Beállítások → Rendszer — Helyi cím (LAN),
Hálózati név (only while Megosztás is enabled), Átjáró; live per render,
stored nowhere (S-5), „—" on unavailable.
Leg B: network section in the Debug system dump (interfaces/route/DNS/
lan_address), best-effort per item via the samba-netns door.
Leg C: NetBIOS trap named — Szerver field helper text + a purely lexical
hint on unreachable failures for single-label non-IP names.

Design note: all guest-net reads go through docker exec into the
host-networked felhom-samba container (stacks/guestnet.go, one seam) —
the controller's own netns is the docker bridge, so /proc/net/route etc.
would answer 172.x (the S-2 trap). Red-proofs: A2 gate-drop and C2
lexical-invert both failed as required.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UuFPHmHNrCJj1VhY6QdDMU

controller/README.md

@@ -122,6 +122,20 @@ backups, monitoring and notifications. All Proxmox/disk operations are delegated
   `agentapi.ResizeMemory` → the code→Hungarian map. A JS confirm fires only on a shrink; an outdated agent
   hides the control; an unreachable agent falls back to the guest's own `/proc/meminfo`. Memory only
   (cores stay observation). The lxcfs ripple means the deploy-page memory math follows a resize for free.
+- **„Hálózat" card (v0.159.0, R-66)** — Beállítások → Rendszer, between „Verzió és frissítés" and
+  „Szerver memória": **Helyi cím (LAN)**, **Hálózati név** (`\\<SMBServerName>` — rendered ONLY while
+  Megosztás is enabled; the NetBIOS name exists only while samba runs), **Átjáró**, plus a muted
+  footer ("read this page aloud during remote troubleshooting"). Every value is live-computed per
+  render and stored NOWHERE (S-5): the reads go through the samba-container netns door
+  (`internal/stacks/guestnet.go` — the controller's own netns is the docker bridge, so in-process
+  answers like `/proc/net/route` would report 172.x, the S-2 trap); with Megosztás off the door is
+  closed and rows render „—" (an address-less row beats a wrong address). Companions: the Debug
+  system dump gains a `network` section (interfaces without veth*/docker*/br-* plumbing, default
+  route + gateway + source interface, DNS from the guest's resolv.conf, and the SAME `lan_address`
+  the card shows for cross-checking), and the NAS add form names the NetBIOS trap — helper text
+  under Szerver, plus a purely lexical hint appended to an `unreachable` failure when the submitted
+  server is a single-label non-IP name (`looksLikeFlatNetworkName`; no NetBIOS/mDNS resolution is
+  ever attempted).
 - **Page IA (v0.97.0, TASK-D1)** — the settings monolith is split into four pages, each with its own
   data builder (`systemPageData`/`storagePageData`/`notificationsPageData`/`securityPageData`, sharing
   `settingsBaseData`) and template. Routes: `/settings` (Rendszer), `/settings/notifications`
@@ -2190,7 +2204,7 @@ When `logging.level: "debug"` is set in `controller.yaml`, the controller expose
 
 | # | Section | Endpoints | Description |
 |---|---------|-----------|-------------|
-| 1 | Rendszer diagnosztika | `GET /api/debug/dump` | Full state dump: controller info, storage, stacks, scheduler, health, alerts. JSON download. |
+| 1 | Rendszer diagnosztika | `GET /api/debug/dump` | Full state dump: controller info, storage, stacks, network (guest-netns interfaces/route/DNS via the samba door, R-66; best-effort per item), scheduler, health, alerts. JSON download. |
 | 2 | Értesítés teszt | `POST /api/debug/event/test`, `GET /api/debug/event/history` | Send test events with configurable type/severity, view event history ring buffer. |
 | 3 | Mentés teszt | `POST /api/debug/backup/{dbdump,crossdrive,integrity,infra}` | Trigger individual backup phases independently. |
 | 4 | Tárhely teszt | `POST /api/debug/storage/simulate-{disconnect,reconnect}`, `GET /api/debug/storage/watchdog-status` | Simulate drive disconnect/reconnect without unmounting. Per-path probe state with 5s auto-refresh. |