Christoph Emsenhuber fde9f1535a n8n-mcp SSRF-Fix: permissive + in Portainer-Stack 174 gefaltet ...

- WEBHOOK_SECURITY_MODE=permissive → n8n-API-Anbindung (http://n8n:5678) wieder verbunden
  (n8n_health_check success:true); Blocker war der app-eigene SSRF-Guard, nicht Netz/Bearer.
- Waisen-Container aus homelab-cline/n8n-mcp-deploy in Portainer-Stack 174 (n8n) gefaltet;
  n8n/redis ohne Downtime, Bearer/Port/Volume erhalten. Orphan-Ordner entfernt.
- SSoT-Mirror docs/macmini-vlan20/stacks/ (gitignored) + Rollback-Backup.
- TP30 Posten #8: N8N_SMTP_PASS beim Stack-Read geleakt (5. Maskierungs-Panne) → Rotation fällig.
- INVENTORY + Handoff aktualisiert.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-09-01 21:04:11 +02:00

..

cf-backup

Stand der Parallelsession eingesammelt (TP39 archiviert, TP41-Backup, TP25 ap2-Verdacht)

2026-09-01 09:20:03 +02:00

messdaten

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

nas-vlan20

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

portainer-upgrade-20260828

Portainer 2.40 → 2.42.0 Bump + portainer-mcp projektspezifisch

2026-08-28 21:17:52 +02:00

research

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp6-marker

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

transaktionen

TP25 Fund E: Hebel 1 widerlegt und zurueckgebaut -- Ringpuffer-Messfehler korrigiert

2026-09-01 09:21:46 +02:00

allnet-ge8-trunk-klickanleitung.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

call-quality-diagnosis.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

call-quality-handout.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

cf-tunnel-mapping.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

core-switch-prep.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

doku-cleanup-session.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

firmware-flash-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

handoff-20260822-naechste-schritte.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

handoff-20260823-session.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

handoff-20260824-session.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

handoff-20260825-agh-dns-cutover.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

handoff-20260826-agh-dns-cutover.md

handoff: 2026-08-26 — AdGuard DNS-Cutover fortsetzen (TP23/TP31)

2026-08-26 17:51:07 +02:00

handoff-20260826-tp31-suffix-sweep.md

handoff: 2026-08-26 — TP31 Schritt 4 fortsetzen + Suffix-Sweep

2026-08-26 20:58:51 +02:00

handoff-20260827-hubert-und-altlasten.md

aufräumen: Inventar-Pipeline stillgelegt, Root-handoff ins docs/, README präzisiert

2026-08-27 21:34:58 +02:00

handoff-20260827-inventur-und-architektur.md

Korrektur: bf-infra HAT ein Gitea-Remote (Inventur-Aussage vom 08-27 ueberholt)

2026-08-30 11:43:24 +02:00

handoff-20260828-mcp-bestand-und-performance.md

MCP-Bestand korrigiert + Mac-mini-Performance-Restriktion

2026-08-28 18:40:05 +02:00

handoff-20260828-mcp-cleanup-und-shelly-tote.md

handoff: 2026-08-28 — MCP-Cleanup, shelly-mcp-Tote, nächste Schritte

2026-08-28 14:40:08 +02:00

handoff-20260828-portainer-bump-und-mcp.md

Portainer 2.40 → 2.42.0 Bump + portainer-mcp projektspezifisch

2026-08-28 21:17:52 +02:00

handoff-20260828-pre-opencode-migration.md

handoff: pre-opencode-migration, backups done, plan open, mid-action correction received

2026-08-28 15:18:06 +02:00

handoff-20260828-session-a-projektstatus.md

TP35 Schicht 6: /projektstatus-Skill in opencode aktiviert + Doku

2026-08-28 19:15:02 +02:00

handoff-20260828-terpene-mcp-migration-cf-tokens.md

Handoff 2026-08-28 (Abends): terpene W1-W7 + globale MCP-Migration + CF-Token-Diagnose

2026-08-28 23:51:46 +02:00

handoff-20260830-ap3.md

TP28: ap3 (cAP ax) live als CAP, ap1 funkstill, Compliance 130/130 ueber 5 Geraete

2026-08-30 17:54:07 +02:00

handoff-20260831-fund-e-hebel1-gezogen.md

sshpass -p repo-weit weg + vier TP15-Cutover-Skripte archiviert

2026-08-31 08:34:08 +02:00

handoff-20260831-tp16.3-paragraph2-3-durch.md

Merge main + nervous-williams; Drift-Zuschreibung korrigiert

2026-08-31 19:34:40 +02:00

handoff-20260831-tp16.3-vorort-session.md

Merge remote-tracking branch 'origin/claude/nervous-williams-acf000' into claude/stoic-khayyam-09b644

2026-08-31 19:33:14 +02:00

handoff-20260831-tp27-upgrade-und-hebel1-befund.md

TP25 Fund E: Hebel 1 gescheitert, TP27 durchgezogen, Fund B entwarnt

2026-08-31 15:27:57 +02:00

handoff-20260831-wlan-fund-e.md

TP25 Fund E: Befund nach einer Nacht Logging -- Reauth-Schleife haengt an ft=yes, Hebelreihenfolge korrigiert

2026-08-31 07:57:36 +02:00

handoff-20260901-fund-e-hebel1-zurueckgebaut.md

TP25 Fund E: Hebel 1 widerlegt und zurueckgebaut -- Ringpuffer-Messfehler korrigiert

2026-09-01 09:21:46 +02:00

handoff-20260901-n8n-mcp-ssrf.md

n8n-mcp SSRF-Fix: permissive + in Portainer-Stack 174 gefaltet

2026-09-01 21:04:11 +02:00

handoff-20260901-tp16.3-paragraph5-flip-durch.md

TP16.3 §6 Abbau durch, TP GESCHLOSSEN (User zog §6 vor)

2026-09-01 01:08:34 +02:00

handoff-20260901-tp25-ap2-verdacht.md

Stand der Parallelsession eingesammelt (TP39 archiviert, TP41-Backup, TP25 ap2-Verdacht)

2026-09-01 09:20:03 +02:00

handoff-20260901-tp41-followup.md

TP41 abschließen: Google/GitHub ✅, FB abgesagt; Geli CF-seitig fertig (zt-humans-Enrollment + geli-Policy live geprüft)

2026-09-01 20:42:41 +02:00

handoff-20260901-tp41.md

TP41: T5-Anleitung (IdP-Callbacks) + TP30 Posten #7 (Terpene-Keystore-PW-Leak)

2026-09-01 19:20:52 +02:00

handoff-20260901-tp42-naming.md

TP41: T4/T3/T2 durch (zt-svc, WARP-intern .36/.37, vw/admin 404 origin); Token-Altlast geklärt; TP42 angelegt

2026-09-01 19:19:52 +02:00

handoff-cf-tunnel-1033.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

handoff-doku-session-20260818.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

handoff-tp6-session.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

handoff-tp25-session-20260821.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

hw-refresh-requirements.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

ip-plan.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

manual-flash-howto.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

matter-pairing-infra-ssid-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

mcp-host-policy.md

MCP-Bestand korrigiert + Mac-mini-Performance-Restriktion

2026-08-28 18:40:05 +02:00

routerboot-firmware-klickanleitung.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

session-20260828-decisions.md

drift-korrektur: Auth-Sanierung (Bearer) gehört in TP16.3, nicht als Vorab-Notiz

2026-08-28 17:18:16 +02:00

session-briefing-20260828.md

session-briefing-20260828.md: TL;DR + Lese-Reihenfolge für neue Sessions

2026-08-28 17:33:23 +02:00

sonos-inventar.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

teilprojekte-archiv.md

Stand der Parallelsession eingesammelt (TP39 archiviert, TP41-Backup, TP25 ap2-Verdacht)

2026-09-01 09:20:03 +02:00

teilprojekte.md

n8n-mcp SSRF-Fix: permissive + in Portainer-Stack 174 gefaltet

2026-09-01 21:04:11 +02:00

tp2.1-omada-switch-standalone-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp5-deny-by-default-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp6-auswertung.py

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp6-bufferbloat-messung.sh

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp6-call-run.sh

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp6-messung-tutorial.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp6-monitor-core.sh

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp6-praemisse-messrunbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp7-mdns.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp10-context-digest.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp10-vpn-migration.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp13-botschafts-wlan-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp14.4-cf-access-token-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp15-ap-reset-handoff-20260808.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp15-core-swap-session-handoff-prompt.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp15-core-swap-session-handover.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp15-crs326-session-handoff-prompt.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp15-session-summary-20260808.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp16.1-session-handoff-prompt.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp16.1-warp-mesh-native-crs326.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp16.3-bf-public-ap-connector-runbook.md

TP16.3 §6 Abbau durch, TP GESCHLOSSEN (User zog §6 vor)

2026-09-01 01:08:34 +02:00

tp16.3-nautobot-mesh-only-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp16.3-paragraph5-session-handoff-prompt.md

Uebergabeprompt §5: Repo-Stand, verifizierter Live-Stand, TP30 vertagt

2026-08-31 19:43:24 +02:00

tp17-shelly-go-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp17.1-shelly-gen4-funkmigration-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp19-vlan1-cudy-teardown-runbook.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp25-gehweg-auswertung.py

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp25-pin-s22.sh

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp25-runde-20260822-2330-auswertung.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp25-runde-20260822-auswertung.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp25-runde.sh

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp25-walk-messung.sh

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp25-wlan-roaming-messung-20260820.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

tp31-schritt5-runbook.md

TP16.3/TP31 Schritt 5: Vor-Ort-Runbook fuer bf-public-Connector (ap1/ap2/ap3)

2026-08-30 21:07:17 +02:00

tp41-t5-idp-callback-anleitung.md

TP41: T5-Anleitung (IdP-Callbacks) + TP30 Posten #7 (Terpene-Keystore-PW-Leak)

2026-09-01 19:20:52 +02:00

vlan1-rueckbau-howto-manuelle-schritte.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

vlan-plan.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

wifi-access-list-erklaert.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00

wifi-p750w-coverage-and-map.md

Initial import from bf-network-r6.opencode — opencode migration

2026-08-26 12:44:21 +02:00