Daily Log: 2026-02-02

🧠 Context Summary

Status: 🟢 Mission Complete | Focus: Warp Core Refit & Security Hardening

Today we successfully completed the "Warp Core Refit", consolidated the storage vault, and deployed high-performance Photo and Document services.

🚧 Achievements

1. Engine Room (Starfleet-Compute):

   • Migration: Successfully moved Radarr, Sonarr, Prowlarr, and qBittorrent from legacy VM isolinear-video.
   • Hardening: Configured x-systemd.automount for /mnt/vault and added Docker healthchecks/log rotation.
   • Persistence: Verified full stack recovery after cold boot.

2. Front of House (Risa-Mediacore):

   • Immich: Deployed a hardware-accelerated Immich instance (v2.x).
   • Storage: Consolidated all photos to /mnt/vault/media/photos.
   • Fix: Corrected Immich port mapping (3001 -> 2283) to resolve 502 Bad Gateway.

3. Operation Green Lock (Gateway):

   • DNS Challenge: Enabled Cloudflare DNS challenge on Risa to obtain valid Let's Encrypt certificates behind NAT.
   • SSL: Secured paperless.the-lal.net, photos.the-lal.net, audio.the-lal.net, and fleet.the-lal.net.
   • Oracle VPS: Updated Oracle proxy to route paperless and photos traffic via Tailscale VPN to the internal nodes.
   • Network: Replaced Risa's network cable, resolving the 100Mbps bottleneck. Verified 920Mbps throughput via iperf3.

4. Decommissioning & Cleanup:

   • VMs: Backed up and destroyed VM 106 (holodeck) and VM 107 (isolinear).
   • Datasets: Deleted redundant media, subspace-comm, and immich_photos datasets, reclaiming ~2.5 TB.

📋 Fleet Health Report (Current)

• risa-mediacore: 🟢 Optimized. Handling Gateway, Plex, Immich, ABS.
• starfleet-compute: 🟢 Hardened. Handling Engine Room (Downloads) & Paperless.
• ds9-truenas: 🟢 Consolidated. Serving Unified Vault.

💡 Strategic Notes

• Security: Cloudflare API token is stored in /opt/docker_data/gateway/.env on Risa and centralized on Memory-Alpha.
• Routing: External traffic follows Oracle -> Tailscale -> Memory-Alpha -> Target Node.