2 Commits

Author	SHA1	Message	Date
Micha	19604e0114	Record FRITZBox WAN cleanup (80/tcp out, VONETS UPnP off) ... Operator umgesetzt 2026-05-28: - 80/tcp aus FRITZBox-UI entfernt; Mobilfunk-validiert: http liefert Timeout, https weiter erreichbar. - 222/tcp bleibt bewusst nicht eingerichtet (Tailscale-only- Linie). MASTER Sektion 10 entsprechend praezisiert. - UPnP-Selbstfreigabe-Recht fuer PC-192-168-178-71 deaktiviert. Identifiziert als VONETS-WiFi-Bridge (vermutlich SolarEdge- Wechselrichter). SolarEdge-Cloud-Sync ist outbound und braucht keine UPnP. Aktiver WAN-Endstand: ausschliesslich 443/tcp -> 192.168.178.58. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-28 15:32:10 +02:00
Micha	3bfecdd291	Add FRITZBox correction plan and offsite options ... Two operator decision documents, doc-only, no live action: - docs/FRITZBOX_PORT_CORRECTION_PLAN.md prepares the three open router items: remove 80/tcp (no HTTP-01 in use), do not add 222/tcp while Tailscale remains the operator path, deactivate the UPnP self-exposure from PC-192-168-178-71. Every step waits for operator go. - docs/OFFSITE_BACKUP_OPTIONS.md compares rsync.net, BorgBase EU2 and rotating cold disk for a second offsite target. Recommends rsync.net or cold disk; BorgBase EU2 is explicitly not recommended because it does not separate the provider risk. No provider booked, no costs triggered. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-27 20:21:03 +02:00