From 9d001771eae9ace303008799e7ea099556f8b23b Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 20 Jul 2026 08:07:38 +0200 Subject: [PATCH] =?UTF-8?q?docs:=20TEMPORARY=20remote-site=20access=20for?= =?UTF-8?q?=20felhom-pve=20(tailnet)=20=E2=80=94=20see=20AUDIT-vacation-re?= =?UTF-8?q?mote-ops-2026-07-20?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01Nhk3eBHT8Mg5L8c2aj57aU --- CLAUDE.md | 13 +++++++++++++ CONTEXT.md | 17 ++++++++++++++++- 2 files changed, 29 insertions(+), 1 deletion(-) diff --git a/CLAUDE.md b/CLAUDE.md index a9f12ef..229f956 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -128,6 +128,19 @@ Claude Code runs **on DooPlex (192.168.0.180, Debian 13, user `kisfenyo`)**; rep > the Windows agent and fails silently — see `docs/vscode-ssh-fix.md`), plus `MSYS_NO_PATHCONV=1` > for `pct exec`. Retained in case that environment is revived. +> **TEMPORARY — felhom-pve is at a remote site (until ~2026-08-02).** The home-LAN literal +> `192.168.0.162` is NOT reachable from DooPlex for the duration. Access via Tailscale: +> felhom-pve = 100.70.170.35; the `Host felhom-pve` entry in `~/.ssh/config` on DooPlex already +> points there (the direct-LAN path stays available as `Host felhom-pve-lan`). Delete this block on +> return. All documented `ssh felhom-pve` / `pct exec` workflows are unchanged. Path is **direct** +> (not DERP), ~37 ms rtt per hop. At the remote site the host is on **DHCP** and currently holds +> `192.168.0.147` (the guest holds `.104`); no Pi-hole there — the guest reaches `gitea.dooplex.hu` +> and `*.demo-felhom.eu` via public paths. **The host agent is DOWN for the duration**: its +> `localapi` binds the literal `192.168.0.162`, which no longer exists → `bind: cannot assign +> requested address`, so every agent-backed feature (storage, PBS backup, quiesce, restore-test, DR) +> is unavailable until fixed. Details + findings: +> `felhom.eu/documentation/audits/AUDIT-vacation-remote-ops-2026-07-20.md` + External access via Cloudflare Tunnel → Traefik; Pi-hole forwards `*.demo-felhom.eu` → .162 locally. ## Build & deploy — MANDATORY after code changes diff --git a/CONTEXT.md b/CONTEXT.md index 5ce0269..c6f8439 100644 --- a/CONTEXT.md +++ b/CONTEXT.md @@ -7,7 +7,22 @@ > > Ask Claude Code: "Please update CONTEXT.md with what we did today" -Last updated: 2026-07-19 (v0.148.0 — coherent snapshot pairs + an offsite restore that restores) +Last updated: 2026-07-20 (vacation remote-ops audit — no code change) + +> **2026-07-20 — demo box moved to a remote site until ~2026-08-02; `ssh felhom-pve` = tailnet +> 100.70.170.35 (direct, ~37 ms). THE HOST AGENT IS DOWN THERE:** its `localapi` binds the literal +> `192.168.0.162`, the host now DHCPs `192.168.0.147` → `bind: cannot assign requested address`, so +> the service has never started at the remote site and the controller's `agentapi` dials of the same +> literal get `no route to host` — that is the whole "A tárolókezelő ügynök nem elérhető" banner, and +> it kills storage/PBS-backup/quiesce/restore-test/DR until fixed (Viktor GO: config **and** guest +> bootstrap state). Calibre-Web and `immich-server` were left `Exited` by the pre-transport shutdown +> and never came back despite `unless-stopped`; Calibre-Web was restarted via the real UI endpoint, +> Immich deliberately left down. Two code defects found and NOT fixed: **the dashboard's "Utolsó +> mentés: Még nem futott" is a display bug** (`dashboardHandler` never sets `BackupStatus`, so +> `dashboard.html:116`'s `{{if}}` branch is unreachable — it renders on every box regardless of +> history), and **multi-container apps under-alert** (`IsDownState` excludes `unhealthy`, so Immich's +> dead primary container produced no banner and no `app_start_failed` event for 18 h). +> Full evidence + ranked findings: `felhom.eu/documentation/audits/AUDIT-vacation-remote-ops-2026-07-20.md` > **2026-07-19 — v0.148.0: R-43 + R-44.** Viktor deleted 11 immich photos to test offsite restore; > both runs flashed success and the photos stayed gone (`DIAG-immich-restore-2026-07-19`). Two