fizzlepoof/truenas-stacks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Document UniFi baseline secret leak guardrails

Browse Source
This commit is contained in:
Doris
2026-05-22 20:58:41 +00:00
parent 5f56fe75d8
commit c2c71cfe57
6 changed files with 145 additions and 609 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
home/doris-dashboard/docs/unifi-live-preflight-snapshot-2026-05-22.md
View File

@@ -103,7 +103,7 @@ These are still the two management-lane ESP-class offenders to identify or evict
- confirmed named host placement for the server batch and Old IoT migration set
- confirmed management offenders remain present
- confirmed U6 LR still appears offline/disconnected
- captured a raw pre-write baseline of `networkconf` and `portconf` at `/home/fizzlepoof/repos/truenas-stacks/home/doris-dashboard/docs/baselines/unifi-object-baseline-2026-05-22-024653.json`
- captured a raw pre-write baseline of `networkconf` and `portconf` outside the main repo; only sanitized summaries/redacted artifacts belong under `docs/baselines/`
- authored an idempotent staging helper at `/home/fizzlepoof/repos/truenas-stacks/automation/bin/unifi_stage_low_risk_objects.py`
- copied that helper to PD at `/mnt/docker-ssd/docker/compose/automation/bin/unifi_stage_low_risk_objects.py`
- confirmed the current Doris UniFi account is still read-only for writes: `POST /rest/networkconf` returns `403 Forbidden`