# Migration Checklist — New GTHost Detroit Server

**New hardware:** Supermicro 2029TP-HTR, Intel Gold 6152 22c/44t, 192GB DDR4, 2x1.92TB SSD  
**Target OS:** Proxmox 9 ✅ installed by GTHost  
**Old server:** Denver, Silver 4116, $103/mo → cancel after migration confirmed

---

## Current Status (Mar 29 — in progress)

- ✅ New server provisioned and up — Proxmox 9 installed
- ✅ PBS datastore disk resized to 1.1TB
- ✅ PBS datastore recreated fresh (old one was already cleared)
- ✅ Fresh backup of all VMs/containers completed Mar 29 ~08:34
- ✅ Network bridges configured (vmbr0–vmbr6) on new host
- 🔧 OPNsense VMs being created now (9001, 9002)

---

## Pre-Migration

- [ ] Export OPNsense config (both routers) — System → Configuration → Backups → Download
- [x] Delete old PBS datastore and recreate fresh
- [x] Run fresh backup — priority order:
  - [x] OPNsense core router
  - [x] OPNsense zpack router
  - [x] zlh-dns
  - [x] zpac-api
  - [x] zpac-portal
  - [x] zlh-artifacts
  - [x] zlh-velocity
  - [x] All remaining VMs/containers
- [x] Verify all backups show green

---

## Phase 1 — New Server Setup

- [x] Configure network bridges to match current layout (vmbr0–vmbr6)
- [ ] Set up VLANs
- [ ] Add PBS as backup target on new server
- [ ] Verify new server can see PBS backup repository

---

## Phase 2 — Restore VMs (est. 2-4 hrs)

Restore in this order — networking first:

- [ ] OPNsense core router 9001 (VM) — fresh 26.1 + config import + os-isc-dhcp plugin
- [ ] OPNsense zpack router 9002 (VM) — fresh 26.1 + config import + os-isc-dhcp plugin
- [ ] zlh-dns 9010 (Technitium)
- [ ] zlh-proxy 9011 (Traefik core)
- [ ] zlh-zpack-proxy 9012 (Traefik game/dev edge)
- [ ] zlh-monitor 9016 (Prometheus/Grafana)
- [ ] zlh-artifacts 9014
- [ ] zpac-api 9020
- [ ] zpac-portal 9021
- [ ] zlh-velocity 9015 (Minecraft proxy)
- [ ] zlh-back 9017 (PBS — if moving)
- [ ] zlh-connect 9013 (Twingate)
- [ ] aimeesites 9030
- [ ] Game/dev containers

---

## Phase 3 — Verification (est. 2-4 hrs)

- [ ] Internal networking between VMs working
- [ ] Portal loads
- [ ] API responds
- [ ] Twingate connector online — update connector to new server if needed
- [ ] Dev container provisions and browser IDE loads
- [ ] Game server provisions and Minecraft connects via Velocity
- [ ] PBS backup runs successfully on new host
- [ ] Monitoring shows all services

---

## Phase 4 — DNS Cutover (est. 30 mins)

- [ ] Update Cloudflare A record for Velocity public IP
- [ ] Update Cloudflare SRV records for Minecraft
- [ ] Update any other DNS records pointing to old server IPs
- [ ] Monitor for issues — 30 min observation window
- [ ] Confirm everything stable

---

## Phase 5 — Cleanup

- [ ] Cancel old Denver server (or let expire)
- [ ] Update PROJECT_CONTEXT.md with new VM map and IPs
- [ ] Update OPEN_THREADS.md — mark migration complete

---

## Notes

- Everything runs on private IPs internally — no hardcoded public IP dependencies
- DNS cutover is the only external change
- Worst case: reinstall Proxmox 8 and repeat
- IPMI available via GTHost panel for out-of-band access if needed
- Proxmox 9 ships with kernel 6.14, LXC 6.0 — no API changes required
- OPNsense 26.1: install os-isc-dhcp plugin BEFORE importing config (ISC DHCP no longer built-in)
- Firewall rule migration assistant available in 26.1 — not urgent, do after everything is stable