Update status - new host operational, browser IDE confirmed working Apr 1

SCRATCH/session-status-mar29-evening.md

@@ -1,85 +1,50 @@
-# Session Status — Mar 30 End of Day
+# Session Status — Apr 1 End of Day
 
-## Everything In Backblaze (zpack-migration bucket)
+## Platform Status — NEW HOST OPERATIONAL
-- ✅ zlh artifacts (/opt/zlh)
+Everything is back to where it was on the old host. Browser IDE confirmed working end-to-end.
-- ✅ zpack-api project folder (excluding node_modules)
+Further testing needed before DNS cutover.
-- ✅ zpack-portal project folder (excluding node_modules)
-- ✅ MariaDB dump
-- ✅ Redis dump
-- ✅ All configs saved to git (SCRATCH/caddy/, SCRATCH/traefik/)
 
 ## Completed
 - ✅ PBS datastore recreated + full backup of old host
 - ✅ Network bridges (vmbr0–vmbr6) configured on new host
-- ✅ OPNsense core router (9001) — fresh 26.1, config imported, WAN set, working
+- ✅ OPNsense core router (9001) — working
-- ✅ OPNsense zpack router (9002) — fresh 26.1, config imported (NAT issue being worked)
+- ✅ OPNsense zpack router (9002) — NAT fixed, working
-- ✅ zlh-dns (9010) — Technitium installed, backup restored
+- ✅ zlh-dns (9010) — Technitium running, zones restored
-- ✅ zlh-proxy (9011) — Caddy installed, Caddyfile in place (service not started yet)
+- ✅ zlh-proxy (9011) — Caddy running
-- ✅ zlh-zpack-proxy (9012) — Traefik installed, config in place (service not started yet)
+- ✅ zlh-zpack-proxy (9012) — Traefik v3.6.12 running, Cloudflare cert resolving
-- ✅ zlh-artifacts (9014) — content synced from B2, Caddy configured (service not started yet)
+- ✅ zlh-artifacts (9014) — Caddy running, content serving on :8080
-- ✅ zpac-api (9020) — VM created, project + DB + Redis pulled from B2
+- ✅ zlh-velocity (9015) — running
-- ✅ zpac-portal (9021) — VM created, project pulled from B2
+- ✅ zlh-monitor (9016) — Prometheus running, scrape targets updated
-- ✅ All LXCs and VMs created on new host
+- ✅ zlh-back (9017) — PBS running, MGMT_LAN interface added, connected to Proxmox
+- ✅ zpac-api (9020) — running, MariaDB bind fixed, Proxmox API token set
+- ✅ zpac-portal (9021) — running
+- ✅ Proxmox API permissions — apiuser@pve + ZLH-API/ZLH-API-CT roles recreated
+- ✅ LXC base template 820 — restored and working
+- ✅ Browser IDE (dev-6072.zerolaghub.dev) — loading end-to-end on new host
+- ✅ Dev container provisioning — working via API
 
-## Outstanding — Next Session Start Here
+## New Host IPs (see SCRATCH/new-host-ips.md)
+- zlh-dns: 10.60.0.14
+- zlh-proxy: 10.60.0.16
+- zpack-proxy: 10.70.0.11
+- zlh-artifacts: 10.60.0.17
+- zpac-api: 10.60.0.18
+- zpac-portal: 10.60.0.19
+- zlh-monitor: 10.60.0.25
+- zpack-velocity: 10.70.0.10
 
-### 9002 (zpack-router) — NAT issue
+## Outstanding Before DNS Cutover
-- [ ] Fix outbound NAT — orphaned interface references from config import
+- [ ] Further testing of all platform features
-- [ ] Verify LXCs on ZPACK_LAN can reach internet
+- [ ] Fix update.go compiled constant in zlh-agent (hardcoded old artifacts IP)
+- [ ] Verify Minecraft player connections via Velocity
+- [ ] Verify game server provisioning end-to-end
+- [ ] zlh-connect (9013) — Twingate fresh connector install
+- [ ] aimeesites (9030) — content migration
+- [ ] Set DHCP reservations by MAC in OPNsense to lock IPs
 
-### Proxmox API token for container provisioning
+## DNS Cutover (when ready)
-- [ ] Create user `zlh-automation@pve` on new host
+- [ ] Update Cloudflare A records to new Detroit public IP
-- [ ] Create API token — save it
+- [ ] Update Cloudflare SRV records for Minecraft
-- [ ] Assign role with VM.Allocate, VM.Config.*, Datastore.AllocateSpace, Sys.Console at path `/`
+- [ ] Update Namecheap if needed
-- [ ] Update token in zpac-api .env file
+- [ ] 30 min observation window
-- NOTE: Proxmox 9 REST API is backwards compatible with PVE 8 — no code changes needed
+- [ ] Cancel old Denver server after confirmed stable
-
-### zpac-api (9020) — needs services installed
-- [ ] Install Node 22, MariaDB, Redis
-- [ ] Import DB dump from /opt/databases/
-- [ ] Restore Redis dump
-- [ ] npm install
-- [ ] npx prisma generate
-- [ ] Update .env with new host IPs + new Proxmox API token
-- [ ] Start and verify API responds
-
-### zpac-portal (9021)
-- [ ] Install Node 22
-- [ ] npm install + npm run build
-- [ ] Update .env.local with new API IP
-- [ ] Start and verify portal loads
-
-### zlh-velocity (9015)
-- [ ] Install Java
-- [ ] Copy Velocity jar + plugin jar from old host or B2
-- [ ] Configure velocity.toml
-- [ ] Start and verify
-
-### zlh-monitor (9016)
-- [ ] Fresh Prometheus + Grafana install
-- [ ] Restore Grafana dashboard JSON exports
-
-### zlh-back (9017)
-- [ ] Fresh PBS VM install
-- [ ] Configure datastore
-- [ ] Add as backup target on new Proxmox host
-
-### zlh-connect (9013)
-- [ ] Fresh Twingate connector install
-- [ ] Register in Twingate dashboard, remove old connector
-
-### aimeesites (9030)
-- [ ] Migrate content
-
-### LXC base templates (810/890)
-- [ ] vzdump on old host → transfer to new host via B2 or SFTP
-- [ ] Restore + convert to template on new host
-
-## After All Services Up
-- [ ] Start all services (Caddy 9011, Traefik 9012, Caddy 9014, API, portal)
-- [ ] Set static IPs / DHCP reservations by MAC in OPNsense
-- [ ] Update Caddy config on 9011 with correct API + portal IPs
-- [ ] Update Traefik dynamic config on 9012 with new API IP
-- [ ] Update .env files with final IPs
-- [ ] DNS cutover — Cloudflare A + SRV records for Velocity
-- [ ] Cancel old Denver server