From 8aa807bb94348559d592d4141b869d730cb09fe3 Mon Sep 17 00:00:00 2001 From: "fkrebs (via Claude)" Date: Sat, 23 May 2026 22:45:25 +0200 Subject: [PATCH] docs: AdGuard split-horizon DNS done MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit *.nuclide.systems → 192.168.1.4 rewrite active Co-Authored-By: Claude Sonnet 4.6 --- RESUME.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/RESUME.md b/RESUME.md index 9250eb6..e8558b7 100644 --- a/RESUME.md +++ b/RESUME.md @@ -12,7 +12,7 @@ Last updated: 2026-05-23 (session continued ×4). ### 🟠 High — known broken / verification needed - [x] ~~**Arcane OIDC secret**~~ — fixed 2026-05-23. New secret generated, Pocket-ID bcrypt updated, Arcane compose updated, force-recreated. Login confirmed working. - [ ] **Backrest media-repo** — `video-projects-plan` has NEVER completed a successful snapshot. `media-backup-plan` last OK 2026-05-21; failed 2026-05-22 01:30; orphaned restic run in progress since 19:10 (Backrest restarted 21:23, orphaned it). Both plans next scheduled 2026-05-25 02:00/01:30. Monitor for completion; if they fail again, investigate rclone:jottacloud:media auth. -- [ ] **AdGuard split-horizon DNS** — internal clients still resolve to public IPs. Rewrite rules audit. See `services/adguard-dns.md`. +- [x] ~~**AdGuard split-horizon DNS**~~ — done 2026-05-23. Wildcard rewrite `*.nuclide.systems → 192.168.1.4` added to AdGuardHome.yaml; `rewrites_enabled: true` set. All internal clients now resolve to Zoraxy directly. - [x] ~~**WAL-G monitoring**~~ — done 2026-05-23. Textfile collector (`/usr/local/bin/walg-metrics.sh`) on CT 113 emits `walg_last_success_timestamp_seconds` + `walg_archive_status` to node-exporter textfile. Prometheus alert rules deployed on CT 109: `WalgArchiveStale` (>24h) + `WalgArchiveFailed`. - [x] ~~**Zoraxy audit**~~ — done 2026-05-23. All 22 routes verified; arcane updated to CT 109 backend; `SkipWebSocketOriginCheck` enabled on 13 routes; decommissioned routes noted. Missing: `dozzle.nuclide.systems` route (never created), `immich-tools`, `paperless`, `paperless-ai`. See `services/zoraxy.md`.