| Property | Value |
|---|---|
| Site | Home |
| Hypervisor host | VE-IO-01 |
| Role | Misc Docker host — UniFi controller, network monitoring, CI runner, dashboards |
| OS | Debian 12 bookworm (kernel 6.1.0-44) |
| Primary IP | 10.100.100.202 |
| SSH alias | vm-sl-12 |
| vCPU | 8 vCPU (host: AMD Ryzen 9 9900X) |
| Memory | 7.8 GiB |
| Storage | 100 GiB on local-zfs (37 GiB used) |
| Backup | PBS VM-image-level via VE-IO-01. |
/services/unifi./services/ip-updater.ens18 on bridge Server VLAN 1000 (MAC 00:0c:29:72:ee:c1)portainer-update-* networks left behind by Portainer EE auto-update events (cleanup pending)10.100.100.222 (VM-SL-22) primary, 10.100.100.10 (VM_DC_01 RZ AD) secondaryServer.XIO| Property | Value |
|---|---|
| SSH user | alexander |
| SSH key (local) | E:/Workspace/Repositories/Clean Up/.secrets/ssh/blackreset_admin_ed25519 |
| Listening ports (notable) | 22 (SSH), 8000+8080+8181+8441+8443+8843+8880+9000+9443 (UniFi+Portainer EE+Heimdall), 13000 (Tautulli), 6789 (UniFi STUN), 20211 (PI-Alert) |
| Notes | Discovery 2026-04-29. Phase 0 cleanup script applied (sudo + qemu-guest-agent + omada-volume removal + portainer-update network prune). |
inventory/vm-sl-12/issues-protocol.md (repo). Removed: Rental-Web-Staged container (exited 3y), omada-data/omada-logs/omada-work volumes, 8× portainer-update-* networks, 3.42 GB unused image layers. Refreshed images for Tautulli/GitLab-Runner/UniFi/NetAlertX/Heimdall.sudo package not installed — blocks any privilege-elevation operation. Must be installed for further host-level work.open-vm-tools enabled instead of qemu-guest-agent (VM is on KVM/Proxmox, not VMware). Switch needed.cron-apt (legacy) AND unattended-upgrades active — redundant auto-patching. Drop cron-apt.apt-get autoremove./etc/hosts says VM-SL-12.blackreset.com but DHCP search domain is Server.XIO — minor FQDN inconsistency.reg.git.blackreset.com:443 returns denied: access forbidden for ip-updater and smarthome-hub image pulls. Run docker login reg.git.blackreset.com:443 with GitLab credentials.:latest tag — TODO pin per No-compromises baseline.portainer-ee:latest) — paid license. Verify currency + renewal cadence.testchamber (experimental). Confirm production-readiness or move to lab.tattuli. Defer (rename requires service downtime + migration).