Commit graph

18 commits

Author SHA1 Message Date
be6ad4c183 Add MyCloud portal access notes for mycloud.itecnologys.com.
Portal lives on CT114 nginx behind Traefik with Cloudflare Access.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 20:19:18 +02:00
d75b4d9319 SPEC-056: pfSense WebGUI via Cloudflare Tunnel and Access.
firewall.itecnologys.com uses Access OTP; Tailscale :18443 remains break-glass.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 18:44:06 +02:00
5bb0f2b74d SPEC-055 implemented: Proxmox WebUI via Cloudflare Tunnel and Access.
proxmox.itecnologys.com redirects to Access; Tailscale :8006 remains break-glass.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 18:16:47 +02:00
0bfd7f5e1a SPEC-055: Access app ready; document Tunnel Edit permission gap.
Token can manage Access/DNS for proxmox.itecnologys.com but cannot create tunnels.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 18:11:44 +02:00
81f8298a43 SPEC-055: lock proxmox.itecnologys.com; note API permission blocker.
cloudflared installed on big1; need Tunnel/Access token to finish.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 17:41:30 +02:00
70a3d8e542 SPEC-055: restore pre-implementation checklist after Access email lock-in.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 17:36:00 +02:00
c1b200ae15 SPEC-055: lock Cloudflare Access email to admin@itecnologys.com.
Hostname for the Proxmox tunnel remains pending due to DNS conflicts.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 17:35:43 +02:00
782359e99c Add SPEC-055 plan for Proxmox WebUI via Cloudflare Tunnel and Access.
Documents architecture, prerequisites, and rollout steps; Tailscale remains break-glass.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 17:32:43 +02:00
2ca126b00c Update pfSense ACCESS/SPEC-053 with WAN admin lock details.
Document Tailscale-only SSH/WebGUI after removing EasyRule :22 and blocking wanip 22/10443.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 17:22:23 +02:00
cf2c0fba23 Document private Tailscale admin for pfSense and Proxmox.
SPEC-053 WAN lock for SSH/WebGUI; SPEC-054 mirrors the same model for PVE :8006.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 17:22:15 +02:00
22f475d5be Document pfSense admin SSH key for private Tailscale access.
SPEC-053/ACCESS include roger ed25519 key and ProxyJump config so admin can reach VM100 without WAN exposure.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-11 16:43:17 +02:00
Roger (Cursor)
3898a2b04d docs(rentcharge): Cloudflare tunnel 1033 cause and hardening 2026-09-08 20:30:23 +00:00
38fd9fe63d feat(casa): projeto Boiler Tuya Energy (CT120, SQLite, boiler.myvexx.com) separado do R630
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 16:05:12 +00:00
a6f445920b docs(infra): token Cloudflare myvexx.com para DNS e tunel (boiler separado do R630)
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 16:01:05 +00:00
6768261acb docs(infra): Tapo P110 R630_Dell_Server 192.168.1.104 ON — never turn off 2026-09-08 13:05:57 +00:00
1a1db5c9be docs(infra): playbook Cursor Tapo Tuya MCP e Proxmox na tomada Tapo 2026-09-08 12:56:40 +00:00
5edacd7f9a SPEC-VM500 Rent and Charge: docs, DNS, Traefik, VM500 access. 2026-09-05 14:08:55 +00:00
1e2dd78c29 RULE: SPECs por projecto; Invest/ERP/Infra no vault + sidebar 2026-08-05 18:18:55 +00:00