- wizard.sh + connect.conf: TUNNEL_LOCAL_SSH_PORT back to 2223 (Synology SSH port)
- port-registry: renamed x6340 → x4662 (matches QuickConnect ID)
- port-registry: added MR2200ac mesh satellite note for x4662
- deployment checklist: added kit-connect section, post-deployment rules,
incident log, and complete fleet port registry table
- memory: added fleet-router-inventory.md with full fleet state
- hub README: updated with current status and locations
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Adds sections 2b (Safe Access) and 2c (Traffic Control):
- Disable WPS, login page title = DEVICE_ID
- Synology Account sign-in for QuickConnect relay
- Google Safe Browsing via API key, Threat Intelligence DB
- DoS protection enabled, NO DoH servers
- Traffic Control: per-client 80% cap, auto-speedtest on new WAN
- Update preflight memory with all security requirements
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- scripts/backup-config.sh: weekly router config backup to hub (SRM + OpenWrt)
Runs via cron, exports platform-specific config, POSTs to /api/backup
Keeps last 10 backups per device on hub
- hub/ingest.sh: fleet hub telemetry normalizer + backup receiver
Normalises GL (openwrt) and Synology telemetry into single schema
Adds platform field to GL telemetry for unified dashboard
- hub/dashboard.html: single-pane fleet console
Shows all routers (GL + Synology) with scores, WAN state, GPS, uptime
Auto-refreshes every 10s from /api/status endpoint
- 62-point checklist updated with weekly backup section 9b
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
kitadmin
allen