Update session status end of Mar 30 - everything in B2, services ready to start

SCRATCH/session-status-mar29-evening.md

@@ -1,39 +1,52 @@
-# Session Status — Mar 29 Evening
+# Session Status — Mar 30 End of Day
 
-## Completed Today
+## Everything In Backblaze (zpack-migration bucket)
+- ✅ zlh artifacts (/opt/zlh)
+- ✅ zpack-api project folder (excluding node_modules)
+- ✅ zpack-portal project folder (excluding node_modules)
+- ✅ MariaDB dump
+- ✅ Redis dump
+- ✅ All configs saved to git (SCRATCH/caddy/, SCRATCH/traefik/)
+
+## Completed
 - ✅ PBS datastore recreated + full backup of old host
 - ✅ Network bridges (vmbr0–vmbr6) configured on new host
-- ✅ OPNsense core router (9001) — fresh 26.1, config imported, WAN set
-- ✅ OPNsense zpack router (9002) — fresh 26.1, config imported
+- ✅ OPNsense core router (9001) — fresh 26.1, config imported, WAN set, working
+- ✅ OPNsense zpack router (9002) — fresh 26.1, config imported (NAT issue being worked)
 - ✅ zlh-dns (9010) — Technitium installed, backup restored
-- ✅ zlh-proxy (9011) — LXC created, Caddy installed, Caddyfile in place
-- ✅ zlh-zpack-proxy (9012) — LXC created, Traefik installed, config in place
-- ✅ zlh-artifacts (9014) — LXC created, content synced from B2, Caddy configured
-- ✅ zpac-api (9020) — VM created, project folder + DB dump + Redis dump synced to B2, transferred to new VM
+- ✅ zlh-proxy (9011) — Caddy installed, Caddyfile in place (service not started yet)
+- ✅ zlh-zpack-proxy (9012) — Traefik installed, config in place (service not started yet)
+- ✅ zlh-artifacts (9014) — content synced from B2, Caddy configured (service not started yet)
+- ✅ zpac-api (9020) — VM created, project + DB + Redis pulled from B2
+- ✅ zpac-portal (9021) — VM created, project pulled from B2
 - ✅ All LXCs and VMs created on new host
 
-## Still To Do
+## Outstanding — Next Session Start Here
 
-### zpac-api (9020)
+### 9002 (zpack-router) — NAT issue
+- [ ] Fix outbound NAT — orphaned interface references from config import
+- [ ] Verify LXCs on ZPACK_LAN can reach internet
+
+### zpac-api (9020) — needs services installed
 - [ ] Install Node 22, MariaDB, Redis
-- [ ] Pull DB dump from B2 and import
-- [ ] Pull Redis dump from B2 and restore
+- [ ] Import DB dump from /opt/databases/
+- [ ] Restore Redis dump
 - [ ] npm install
+- [ ] npx prisma generate
 - [ ] Update .env with new host IPs
 - [ ] Start and verify API responds
 
 ### zpac-portal (9021)
-- [ ] Pull project folder from B2
 - [ ] Install Node 22
-- [ ] npm install
-- [ ] Update .env with new API IP
+- [ ] npm install + npm run build
+- [ ] Update .env.local with new API IP
 - [ ] Start and verify portal loads
 
 ### zlh-velocity (9015)
 - [ ] Install Java
-- [ ] Copy Velocity jar + plugin jar from old host
+- [ ] Copy Velocity jar + plugin jar from old host or B2
 - [ ] Configure velocity.toml
-- [ ] Start and verify Minecraft proxy
+- [ ] Start and verify
 
 ### zlh-monitor (9016)
 - [ ] Fresh Prometheus + Grafana install
@@ -46,16 +59,20 @@
 
 ### zlh-connect (9013)
 - [ ] Fresh Twingate connector install
-- [ ] Register new connector in Twingate dashboard
-- [ ] Remove old connector
+- [ ] Register in Twingate dashboard, remove old connector
 
 ### aimeesites (9030)
 - [ ] Migrate content
 
+### LXC base templates (810/890)
+- [ ] vzdump on old host → transfer to new host via B2 or SFTP
+- [ ] Restore + convert to template on new host
+
 ## After All Services Up
+- [ ] Start all services (Caddy 9011, Traefik 9012, Caddy 9014, API, portal)
 - [ ] Set static IPs / DHCP reservations by MAC in OPNsense
 - [ ] Update Caddy config on 9011 with correct API + portal IPs
 - [ ] Update Traefik dynamic config on 9012 with new API IP
 - [ ] Update .env files with final IPs
-- [ ] DNS cutover — Cloudflare A + SRV records
+- [ ] DNS cutover — Cloudflare A + SRV records for Velocity
 - [ ] Cancel old Denver server