diff --git a/CLAUDE.md b/CLAUDE.md
index a9f12ef..229f956 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -128,6 +128,19 @@ Claude Code runs **on DooPlex (192.168.0.180, Debian 13, user `kisfenyo`)**; rep
 > the Windows agent and fails silently — see `docs/vscode-ssh-fix.md`), plus `MSYS_NO_PATHCONV=1`
 > for `pct exec`. Retained in case that environment is revived.
 
+> **TEMPORARY — felhom-pve is at a remote site (until ~2026-08-02).** The home-LAN literal
+> `192.168.0.162` is NOT reachable from DooPlex for the duration. Access via Tailscale:
+> felhom-pve = 100.70.170.35; the `Host felhom-pve` entry in `~/.ssh/config` on DooPlex already
+> points there (the direct-LAN path stays available as `Host felhom-pve-lan`). Delete this block on
+> return. All documented `ssh felhom-pve` / `pct exec` workflows are unchanged. Path is **direct**
+> (not DERP), ~37 ms rtt per hop. At the remote site the host is on **DHCP** and currently holds
+> `192.168.0.147` (the guest holds `.104`); no Pi-hole there — the guest reaches `gitea.dooplex.hu`
+> and `*.demo-felhom.eu` via public paths. **The host agent is DOWN for the duration**: its
+> `localapi` binds the literal `192.168.0.162`, which no longer exists → `bind: cannot assign
+> requested address`, so every agent-backed feature (storage, PBS backup, quiesce, restore-test, DR)
+> is unavailable until fixed. Details + findings:
+> `felhom.eu/documentation/audits/AUDIT-vacation-remote-ops-2026-07-20.md`
+
 External access via Cloudflare Tunnel → Traefik; Pi-hole forwards `*.demo-felhom.eu` → .162 locally.
 
 ## Build & deploy — MANDATORY after code changes
diff --git a/CONTEXT.md b/CONTEXT.md
index 5ce0269..c6f8439 100644
--- a/CONTEXT.md
+++ b/CONTEXT.md
@@ -7,7 +7,22 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-07-19 (v0.148.0 — coherent snapshot pairs + an offsite restore that restores)
+Last updated: 2026-07-20 (vacation remote-ops audit — no code change)
+
+> **2026-07-20 — demo box moved to a remote site until ~2026-08-02; `ssh felhom-pve` = tailnet
+> 100.70.170.35 (direct, ~37 ms). THE HOST AGENT IS DOWN THERE:** its `localapi` binds the literal
+> `192.168.0.162`, the host now DHCPs `192.168.0.147` → `bind: cannot assign requested address`, so
+> the service has never started at the remote site and the controller's `agentapi` dials of the same
+> literal get `no route to host` — that is the whole "A tárolókezelő ügynök nem elérhető" banner, and
+> it kills storage/PBS-backup/quiesce/restore-test/DR until fixed (Viktor GO: config **and** guest
+> bootstrap state). Calibre-Web and `immich-server` were left `Exited` by the pre-transport shutdown
+> and never came back despite `unless-stopped`; Calibre-Web was restarted via the real UI endpoint,
+> Immich deliberately left down. Two code defects found and NOT fixed: **the dashboard's "Utolsó
+> mentés: Még nem futott" is a display bug** (`dashboardHandler` never sets `BackupStatus`, so
+> `dashboard.html:116`'s `{{if}}` branch is unreachable — it renders on every box regardless of
+> history), and **multi-container apps under-alert** (`IsDownState` excludes `unhealthy`, so Immich's
+> dead primary container produced no banner and no `app_start_failed` event for 18 h).
+> Full evidence + ranked findings: `felhom.eu/documentation/audits/AUDIT-vacation-remote-ops-2026-07-20.md`
 
 > **2026-07-19 — v0.148.0: R-43 + R-44.** Viktor deleted 11 immich photos to test offsite restore;
 > both runs flashed success and the photos stayed gone (`DIAG-immich-restore-2026-07-19`). Two