sync: auto-sync from HOWARD-HOME at 2026-06-21 12:00:27
Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-06-21 12:00:27
This commit is contained in:
@@ -99,9 +99,11 @@ The REST backend (`pfsense-backend.sh`, `clients/<slug>/pfsense-api`) is a dorma
|
||||
`pfsense-firewall` cred) and run the dispatch BEFORE UOS site resolution, so a pfSense-only client
|
||||
slug works without a matching UOS site name (pass `--pfsense <slug>` if the names differ).
|
||||
|
||||
**Caveat for THIS office box:** `pfsense-ssh.sh` currently assumes SSH **port 22**; the ACG office
|
||||
pfSense listens on **2248**, so the skill needs a port option before it can manage the office
|
||||
gateway. Cred for it is vaulted at `infrastructure/pfsense-firewall` (verify).
|
||||
**THIS office box:** listens on SSH **port 2248** (not 22). The skill supports non-default ports as
|
||||
of 2026-06-21 — pass `--port 2248`, or (preferred) store `port: 2248` in the box's vault entry and
|
||||
it's automatic. Cred for it is vaulted at `infrastructure/pfsense-firewall` (verify), but the SSH
|
||||
backend expects the cred at `clients/<slug>/pfsense-firewall`, so an `infrastructure/`-path cred
|
||||
would need a slug alias or a small path tweak before `pfsense-ssh.sh` can read it (verify).
|
||||
|
||||
**pfSense PHP gotchas** (baked into the scripts; carry forward to any new helper):
|
||||
- Bootstrap with `require_once("config.inc")` ONLY — re-requiring util/functions/filter → "cannot
|
||||
|
||||
Reference in New Issue
Block a user