sync: auto-sync from HOWARD-HOME at 2026-06-21 12:00:27

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-21 12:00:27
This commit is contained in:
2026-06-21 12:01:12 -07:00
parent 85887fec19
commit 760719e3a5
6 changed files with 160 additions and 16 deletions

View File

@@ -99,9 +99,11 @@ The REST backend (`pfsense-backend.sh`, `clients/<slug>/pfsense-api`) is a dorma
`pfsense-firewall` cred) and run the dispatch BEFORE UOS site resolution, so a pfSense-only client
slug works without a matching UOS site name (pass `--pfsense <slug>` if the names differ).
**Caveat for THIS office box:** `pfsense-ssh.sh` currently assumes SSH **port 22**; the ACG office
pfSense listens on **2248**, so the skill needs a port option before it can manage the office
gateway. Cred for it is vaulted at `infrastructure/pfsense-firewall` (verify).
**THIS office box:** listens on SSH **port 2248** (not 22). The skill supports non-default ports as
of 2026-06-21 — pass `--port 2248`, or (preferred) store `port: 2248` in the box's vault entry and
it's automatic. Cred for it is vaulted at `infrastructure/pfsense-firewall` (verify), but the SSH
backend expects the cred at `clients/<slug>/pfsense-firewall`, so an `infrastructure/`-path cred
would need a slug alias or a small path tweak before `pfsense-ssh.sh` can read it (verify).
**pfSense PHP gotchas** (baked into the scripts; carry forward to any new helper):
- Bootstrap with `require_once("config.inc")` ONLY — re-requiring util/functions/filter → "cannot