Differences

This shows you the differences between two versions of the page.

--- meta:broken-tools [2026/08/22 11:16] – external edit 127.0.0.1
+++ meta:broken-tools [2026/08/22 11:30] (current) – external edit 127.0.0.1
@@ Line 14: / Line 14: @@
 | Date | Tool | Issue | Status |
 |------|------|-------|--------|
-| 2026-08-22 | OPNsense HTTPS | Port 443 listener completely dead. Blocks Caddy reverse-proxy HTTPS API access. | Steve enabled Caddy manually; HTTPS API still untested |
+| 2026-08-22 | OPNsense Caddy reverse proxy | Plugin UI installed but virtual hosts not added via UI; Caddyfile regenerated empty by OPNsense template on every `service caddy start`. Direct file edits get wiped. **Must use OPNsense UI:** Services → Caddy → add domain + handler for each, then Apply. Also: OPNsense lighttpd binds :80, Caddy needs `auto_https off` to avoid conflict. | Waiting on Steve UI work — can't bypass the plugin model |
-| 2026-08-22 | OPNsense Caddy reverse proxy | Plugin installed, not running. Need: enable service, add virtual hosts, restart, then wire Unbound overrides for `*.kaburu.lan`. | Paused — Steve to do OPNsense UI steps |
+| 2026-08-22 | OPNsense HTTPS (web UI) | Port 443 listener completely dead on OPNsense. Root cause: Caddy can't bind :443 while lighttpd binds :80, so OPNsense HTTPS has never worked since Caddy was enabled. Caddy needs `auto_https off` + `http_port 0` to avoid :80 conflict; needs domain entries to actually bind :443. | Same blocker as Caddy above |
 | 2026-08-22 | `mcp<2.0` API drift | `mcp` package bumped to v2.0.0; `mcp.server.fastmcp` removed; 5 shell-MCP scripts crashed. Pin mcp<2.0 in requirements or rewrite scripts. | Pinned mcp<2.0 would re-expose CVE-2026-48710 (starlette <1.3.1). Correct fix: rewrite 5 shell-MCP scripts to use new `mcp.server.mcpserver.MCPServer` API. **TODO.** Larger rewrite: imports change from `mcp.server.fastmcp.FastMCP` to `mcp.server.mcpserver.MCPServer`; tool registration via `server.add_tool(fn, name=...)`; run with `asyncio.run(server.run_stdio_async())`. Probably 30-60 min for all 5. |
 | 2026-08-22 | `/mnt/tank/backups/wiki/sync-from-hetzner.sh` (TrueNAS) | Script is BACKWARDS — tries to sync `kaburusvr.uk/wiki/` (empty) → `kaburuaibox/wiki/`. Would wipe local wiki. Authored before Caddy setup, never tested. | Stale — replaced by new `/home/kaburu/wiki/scripts/wiki-rsync-to-truenas.sh`. Old script still at `/mnt/tank/backups/wiki/sync-from-hetzner.sh` — DELETE NEXT MAINTENANCE WINDOW so nobody runs it. |
@@ Line 28: / Line 28: @@
 | 2026-08-22 | DokuWiki search index | Pages uploaded by file; index never built (0 hits) | Ran `/home/wiki.kaburu.co/public_html/bin/indexer.php` |
 | 2026-08-22 | `wp post delete --force` pattern | Real risk of `--post_name` matching broadly (memory CRITICAL) | Not encountered this session; documented in memory |
+| 2026-08-22 | OPNsense Caddy "Caddy plugin missing" diagnosis | First probe said plugin not installed (404 on HTTPS API). Truth: plugin is installed, HTTPS API just requires HTTPS itself to work. | Used OPNsense shell MCP to enumerate `/usr/local/etc/caddy/`, found Caddy binary + plugin MVC code both present. Re-diagnosed as "no virtual hosts configured" not "plugin missing". |
 ## Discipline rule (for Gwen)