--- name: project-infra-todo description: Infrastructure TODO list — outstanding issues and fixes needed across homelab metadata: node_type: memory type: project originSessionId: b1e93a6a-f101-4ea4-aafb-9cb7e2958821 --- # Infrastructure TODO Last updated: 2026-06-24 --- ## 🔴 OPEN - [x] **CT110 WireGuard filesystem read-only** — fsck run, filesystem clean and rw. wg-clients.conf updated with new MediaStack pubkey. 2026-06-24. - [x] **CT110 wg-clients auto-start** — added `/etc/local.d/wg-clients.start` (OpenRC local service). wg-clients comes up on boot. 2026-06-24. - [x] **MediaStack QEMU guest agent** — installed and running, `qm guest exec 103` verified working 2026-06-24. - [x] **Tailscale re-auth on PVE1** — completed 2026-06-24. - [x] **NovaCPX stale ARP fix permanence** — static ARP for 10.48.200.201 (bc:24:11:67:1d:47) set as PERMANENT via systemd `static-arp.service` on NovaCPX, enabled on boot 2026-06-24. - [x] **web.orbishosting.com — Ollama link** — verified working 2026-06-24. - [x] **MediaStack backup to new storage** — VM 103 disk now on GoFlex storage. Backup job runs nightly at 21:00 to SynologyProx and backs up VM regardless of disk location. Verified 2026-06-24. --- ## ✅ COMPLETED (2026-06-24 session) - [x] MediaStack VM 103 restored from 2026-06-23 backup (I/O errors on Synology disk) - [x] MediaStack disk moved off Synology to new storage - [x] WireGuard kill-switch rebuilt on MediaStack — new keypair, CT110 peer updated, hardcoded fwmark, LAN exception correct - [x] WireGuard tunnel verified — exits via DO (165.22.1.228), handshake active - [x] Ollama listening on 0.0.0.0:11434 (was 127.0.0.1 only) — added systemd override - [x] CT110 LAN IP corrected to 10.48.200.67 (was wrongly documented as 10.48.200.19) - [x] NovaCPX 502s fixed — flushed stale ARP on NovaCPX for NPM's IP - [x] web.orbishosting.com WireGuard CT link updated to 10.48.200.67 - [x] JARVIS admin URL updated to https://jarvis.orbishosting.com/admin/ everywhere - [x] web.orbishosting.com — Downloads card added (INFRASTRUCTURE-REFERENCE.md, syncs daily from JARVIS)