/system_general.php made changes @ 2026-03-03T00:07:18.510000 (root@10.0.20.24)

config.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <opnsense>
-  <theme>opnsense</theme>
-  <sysctl version="1.0.1">
+  <theme>cicada</theme>
+  <sysctl version="1.0.2" persisted_at="1772457860.73" description="System Tunables">
     <item uuid="c795d7a7-27b8-4d55-a947-e072d337a51b">
       <tunable>vfs.read_max</tunable>
       <value/>
@@ -214,7 +214,7 @@
       <value>1000000</value>
       <descr>Automatically added by Zenarmor: Netmap Generic/Native Driver</descr>
     </item>
-    <item>
+    <item uuid="4b0a3e57-dbba-4157-a824-9e8a0a33e05d">
       <tunable>dev.netmap.ring_num</tunable>
       <value>1024</value>
       <descr>Automatically added by Zenarmor</descr>
@@ -232,6 +232,7 @@
       <description>System Administrators</description>
       <priv>page-all</priv>
       <member>0,2000</member>
+      <source_networks/>
     </group>
     <user uuid="ac2e88a0-7806-475a-bbbc-0f9c23edd8b5">
       <uid>0</uid>
@@ -243,6 +244,7 @@
       <otp_seed/>
       <shell/>
       <password>$2y$10$V5R3OFK0X8dz/shqsIj3AuuhVvT/TR8gA6u9s.j0gknxplOMg4tyC</password>
+      <pwd_changed_at/>
       <landing_page/>
       <comment/>
       <email/>
@@ -262,6 +264,7 @@
       <otp_seed>LYA2AG53OBHL35L6NMGE4KEM4ZPHYAWI</otp_seed>
       <shell/>
       <password>$2y$11$77rIEmn8xjecWoKfve.cZ.Fb5PIDN6PR8mM4MdlHubJiuBMiWacqW</password>
+      <pwd_changed_at/>
       <landing_page/>
       <comment/>
       <email>dionscarman@gmail.com</email>
@@ -271,6 +274,26 @@
       <descr>Dion</descr>
       <dashboard/>
     </user>
+    <user uuid="1b64792f-daa3-4fda-95d1-8bf60553bc52">
+      <uid>2001</uid>
+      <name>dashboard</name>
+      <disabled>0</disabled>
+      <scope>user</scope>
+      <expires/>
+      <authorizedkeys/>
+      <otp_seed/>
+      <shell/>
+      <password>$2y$11$q0clTgbaMJ/nyZn4A/x0FO7ejkp0WGWceetnuCs9QDFuSBLH4x7nG</password>
+      <pwd_changed_at/>
+      <landing_page/>
+      <comment>User for api access for dashboard</comment>
+      <email/>
+      <apikeys>dhfPL0EAZWh9Lgs1E4yXtrQj/y0woCIvXu31iM82GcWMyqrGbm14UEk5EK+VXG1WZtK/hrB1kS1jv4tr|$6$$dlqR4qkqzY23lxHXLfHOFgJaRfBPP6YceNQ6eJyd0H/6qNRCLN5fGL4qm41qdU7nf8Mnyen1QQkpk9D3dG1Ll1</apikeys>
+      <priv>page-diagnostics-system-activity,page-system-login-logout,page-status-trafficgraph</priv>
+      <language/>
+      <descr/>
+      <dashboard/>
+    </user>
     <nextuid>2001</nextuid>
     <nextgid>2000</nextgid>
     <timezone>Australia/Adelaide</timezone>
@@ -322,10 +345,11 @@
         <password_encryption/>
         <backupdir>OPNsense-Backup</backupdir>
       </nextcloud>
-      <git version="1.0.0">
+      <git version="1.0.0" persisted_at="1772453199.90" description="Git Backup Settings">
         <enabled>1</enabled>
         <url>ssh://docker.dss.mywire.org:222/opnsense/OPNsense.git</url>
         <branch>main</branch>
+        <force_push>0</force_push>
         <privkey>-----BEGIN OPENSSH PRIVATE KEY-----&#13;
 b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW&#13;
 QyNTUxOQAAACDP5vkf5UfCrx0gxRfPWKyplHvuwDz5hOPh3X8oXMLNTAAAAKAgiKUyIIil&#13;
@@ -357,7 +381,7 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
     <firmware version="1.0.1">
       <mirror/>
       <flavour/>
-      <plugins>os-acme-client,os-ddclient,os-gdrive-backup,os-git-backup,os-nginx,os-sensei,os-sensei-updater,os-sunnyvalley,os-wol</plugins>
+      <plugins>os-acme-client,os-ddclient,os-gdrive-backup,os-git-backup,os-nginx,os-sensei,os-sensei-updater,os-sunnyvalley,os-theme-advanced,os-theme-cicada,os-theme-flexcolor,os-theme-rebellion,os-theme-tukan,os-theme-vicuna,os-wol</plugins>
       <type/>
       <subscription/>
     </firmware>
@@ -744,6 +768,14 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <dnsserver/>
         <ntpserver/>
       </staticmap>
+      <staticmap>
+        <mac>14:ac:60:64:39:d1</mac>
+        <ipaddr>10.0.20.99</ipaddr>
+        <hostname>BRW14AC606439D1</hostname>
+        <winsserver/>
+        <dnsserver/>
+        <ntpserver/>
+      </staticmap>
       <staticmap>
         <mac>4a:02:45:30:ea:02</mac>
         <ipaddr>10.0.20.101</ipaddr>
@@ -810,6 +842,14 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
       <winsserver/>
       <dnsserver>10.0.1.4</dnsserver>
       <ntpserver/>
+      <staticmap>
+        <mac>bc:24:11:8d:1d:79</mac>
+        <ipaddr>10.0.10.2</ipaddr>
+        <hostname>pbs</hostname>
+        <winsserver/>
+        <dnsserver/>
+        <ntpserver/>
+      </staticmap>
       <staticmap>
         <mac>e0:3f:49:b2:12:35</mac>
         <ipaddr>10.0.10.11</ipaddr>
@@ -892,6 +932,14 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <dnsserver/>
         <ntpserver/>
       </staticmap>
+      <staticmap>
+        <mac>bc:24:11:bc:75:fc</mac>
+        <ipaddr>10.0.10.28</ipaddr>
+        <hostname>nextcloud2</hostname>
+        <winsserver/>
+        <dnsserver/>
+        <ntpserver/>
+      </staticmap>
       <staticmap>
         <mac>bc:24:11:05:07:bc</mac>
         <ipaddr>10.0.10.30</ipaddr>
@@ -935,6 +983,14 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <dnsserver/>
         <ntpserver/>
       </staticmap>
+      <staticmap>
+        <mac>bc:24:11:71:80:1e</mac>
+        <ipaddr>10.0.10.35</ipaddr>
+        <hostname>minecraft5</hostname>
+        <winsserver/>
+        <dnsserver/>
+        <ntpserver/>
+      </staticmap>
       <staticmap>
         <mac>bc:24:11:f1:e7:c2</mac>
         <ipaddr>10.0.10.40</ipaddr>
@@ -991,6 +1047,24 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <dnsserver/>
         <ntpserver/>
       </staticmap>
+      <staticmap>
+        <mac>bc:24:11:aa:59:86</mac>
+        <ipaddr>10.0.10.61</ipaddr>
+        <hostname>study-docker</hostname>
+        <descr>Docker CT for study app stack</descr>
+        <winsserver/>
+        <dnsserver/>
+        <ntpserver/>
+      </staticmap>
+      <staticmap>
+        <mac>bc:24:11:98:5a:b8</mac>
+        <ipaddr>10.0.10.62</ipaddr>
+        <hostname>study-compute</hostname>
+        <descr>Compute CT for study app stack</descr>
+        <winsserver/>
+        <dnsserver/>
+        <ntpserver/>
+      </staticmap>
     </opt1>
     <opt4>
       <enable>1</enable>
@@ -1005,6 +1079,14 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
       <winsserver/>
       <dnsserver>10.0.1.4</dnsserver>
       <ntpserver/>
+      <staticmap>
+        <mac>c8:8a:d8:12:ce:5e</mac>
+        <ipaddr>10.0.40.16</ipaddr>
+        <hostname>google-tv</hostname>
+        <winsserver/>
+        <dnsserver/>
+        <ntpserver/>
+      </staticmap>
       <staticmap>
         <mac>56:b5:94:ff:55:f1</mac>
         <ipaddr>10.0.40.21</ipaddr>
@@ -2183,6 +2265,141 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <description>/firewall_rules_edit.php made changes</description>
       </created>
     </rule>
+    <rule uuid="f880879b-6e80-492e-8856-56cded3cc4da">
+      <type>pass</type>
+      <interface>opt1</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Allowing heimdall access to proxmox API</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>docker</address>
+      </source>
+      <destination>
+        <address>Proxmox_Dell</address>
+        <port>8006</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1771860897.52</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1771860897.52</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="e31fcc2c-f2c5-4d40-ad8c-b6e57e5c2942">
+      <type>pass</type>
+      <interface>opt1</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Allowing heimdall access to OPNsense API</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>docker</address>
+      </source>
+      <destination>
+        <address>10.0.1.1</address>
+        <port>8004</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1772368979.09</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1772368979.09</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="4514ec45-8030-4378-a370-7db78d9999f2">
+      <type>pass</type>
+      <interface>opt1</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Allowing heimdall access for PiHole API</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>docker</address>
+      </source>
+      <destination>
+        <address>10.0.1.4/32</address>
+        <port>80</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1772371137.81</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1772369010.12</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="ac978fd6-23c7-45e2-ab05-2fb02d3c0859">
+      <type>pass</type>
+      <interface>opt1</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Allowing homarr access to proxmox API</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>10.0.10.61/32</address>
+      </source>
+      <destination>
+        <address>Proxmox_Dell</address>
+        <port>8006</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1771981808.53</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1771978715.20</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="0b177005-f19c-4f0a-8fe0-325db8806aa9">
+      <type>pass</type>
+      <interface>opt1</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Allowing homarr access to OPNsense API</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>10.0.10.61/32</address>
+      </source>
+      <destination>
+        <address>10.0.1.1</address>
+        <port>8004</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1771981773.77</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1771981773.77</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
     <rule uuid="91393324-4ed4-4811-a78d-1dc6f6c2fabb">
       <type>pass</type>
       <interface>opt1</interface>
@@ -2235,6 +2452,7 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <time>1708316902.6574</time>
         <description>/firewall_rules_edit.php made changes</description>
       </created>
+      <disabled>1</disabled>
     </rule>
     <rule uuid="be9ed7a7-ae79-4452-ba58-9fd8e67e90f4">
       <type>pass</type>
@@ -2316,10 +2534,35 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <description>/firewall_rules_edit.php made changes</description>
       </created>
     </rule>
+    <rule uuid="759ceae6-d2b4-4208-92f9-44a850dbee94">
+      <type>block</type>
+      <interface>opt2</interface>
+      <ipprotocol>inet6</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Block IPv6</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <source>
+        <network>opt2</network>
+      </source>
+      <destination>
+        <any>1</any>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1770553492.54</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1770553492.54</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
     <rule uuid="80be946d-df06-4bea-a87c-8eac4e0f30d8">
       <type>pass</type>
       <interface>opt2</interface>
-      <ipprotocol>inet46</ipprotocol>
+      <ipprotocol>inet</ipprotocol>
       <statetype>keep state</statetype>
       <descr>Allow DNS with PiHole</descr>
       <direction>in</direction>
@@ -2333,8 +2576,8 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <port>53</port>
       </destination>
       <updated>
-        <username>root@10.0.1.131</username>
-        <time>1707547238.3901</time>
+        <username>root@10.0.20.24</username>
+        <time>1770553374.39</time>
         <description>/firewall_rules_edit.php made changes</description>
       </updated>
       <created>
@@ -2794,113 +3037,6 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <description>/firewall_rules_edit.php made changes</description>
       </created>
     </rule>
-    <rule uuid="235552be-8b0e-430c-8292-c8d4f701a518">
-      <type>pass</type>
-      <interface>opt2</interface>
-      <ipprotocol>inet46</ipprotocol>
-      <statetype>keep state</statetype>
-      <direction>in</direction>
-      <quick>1</quick>
-      <source>
-        <address>kodi</address>
-      </source>
-      <destination>
-        <address>jellyfin</address>
-      </destination>
-      <updated>
-        <username>root@10.0.20.22</username>
-        <time>1708041242.5342</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </updated>
-      <created>
-        <username>root@10.0.20.22</username>
-        <time>1707660468.7094</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </created>
-      <disabled>1</disabled>
-    </rule>
-    <rule uuid="513b8e5f-2175-4745-9a15-bc7e389f84de">
-      <type>pass</type>
-      <interface>opt2</interface>
-      <ipprotocol>inet</ipprotocol>
-      <statetype>keep state</statetype>
-      <direction>in</direction>
-      <quick>1</quick>
-      <protocol>tcp</protocol>
-      <source>
-        <address>kodi</address>
-      </source>
-      <destination>
-        <address>OMV</address>
-        <port>22</port>
-      </destination>
-      <updated>
-        <username>root@10.0.20.22</username>
-        <time>1708560436.5421</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </updated>
-      <created>
-        <username>root@10.0.20.22</username>
-        <time>1708560436.5421</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </created>
-      <disabled>1</disabled>
-    </rule>
-    <rule uuid="cff97c01-712e-4988-a6e5-c8b7082fc0af">
-      <type>pass</type>
-      <interface>opt2</interface>
-      <ipprotocol>inet</ipprotocol>
-      <statetype>keep state</statetype>
-      <direction>in</direction>
-      <quick>1</quick>
-      <protocol>tcp</protocol>
-      <source>
-        <address>kodi</address>
-      </source>
-      <destination>
-        <address>OMV</address>
-        <port>445</port>
-      </destination>
-      <updated>
-        <username>root@10.0.20.22</username>
-        <time>1714911101.5821</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </updated>
-      <created>
-        <username>root@10.0.20.22</username>
-        <time>1714910843.8749</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </created>
-      <disabled>1</disabled>
-    </rule>
-    <rule uuid="076e9513-a664-4f29-a920-6ea7a4ace8b6">
-      <type>pass</type>
-      <interface>opt2</interface>
-      <ipprotocol>inet</ipprotocol>
-      <statetype>keep state</statetype>
-      <descr>tvheadend htsp</descr>
-      <direction>in</direction>
-      <quick>1</quick>
-      <protocol>tcp</protocol>
-      <source>
-        <address>kodi</address>
-      </source>
-      <destination>
-        <address>docker</address>
-        <port>9982</port>
-      </destination>
-      <updated>
-        <username>root@10.0.20.22</username>
-        <time>1708575451.8654</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </updated>
-      <created>
-        <username>root@10.0.20.22</username>
-        <time>1708575451.8654</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </created>
-      <disabled>1</disabled>
-    </rule>
     <rule uuid="8bd22705-8518-43fb-b5fe-ca5d826c94ec">
       <type>pass</type>
       <interface>opt2</interface>
@@ -2933,22 +3069,130 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
       <interface>opt2</interface>
       <ipprotocol>inet</ipprotocol>
       <statetype>keep state</statetype>
+      <descr>Phone to Proxmox access</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>dion_phone</address>
+      </source>
+      <destination>
+        <address>Proxmox_Dell</address>
+        <port>8006</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1769811046.75</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.30</username>
+        <time>1711264570.4081</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="548b4f83-fa9f-485e-98e8-d5db076755f8">
+      <type>pass</type>
+      <interface>opt2</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>watch to phone test</descr>
       <direction>in</direction>
       <quick>1</quick>
       <source>
         <address>dion_phone</address>
       </source>
       <destination>
-        <address>OMV</address>
+        <address>10.0.30.12</address>
       </destination>
       <updated>
-        <username>root@10.0.20.30</username>
-        <time>1711264570.4081</time>
+        <username>root@10.0.20.24</username>
+        <time>1759472489.87</time>
         <description>/firewall_rules_edit.php made changes</description>
       </updated>
       <created>
-        <username>root@10.0.20.30</username>
-        <time>1711264570.4081</time>
+        <username>root@10.0.20.24</username>
+        <time>1759472489.87</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="1110da06-c952-40c5-8b67-6be29da9b2c0">
+      <type>pass</type>
+      <interface>opt2</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>phone to nextcloud2 test</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>dion_phone</address>
+      </source>
+      <destination>
+        <address>10.0.10.28/32</address>
+        <port>8080</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1772002905.38</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1772002905.38</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="77afd6a6-636e-4789-b725-21e214681870">
+      <type>pass</type>
+      <interface>opt2</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>phone to gpodder test</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>dion_phone</address>
+      </source>
+      <destination>
+        <address>10.0.10.26/32</address>
+        <port>8000</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1772011809.40</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1772011809.40</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="b44130cf-4aee-460d-8b61-e7f3c9a87d60">
+      <type>pass</type>
+      <interface>opt2</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Allow phone access to the study stack</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>dion_phone</address>
+      </source>
+      <destination>
+        <address>Study_stack</address>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1772136690.76</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1772136690.76</time>
         <description>/firewall_rules_edit.php made changes</description>
       </created>
     </rule>
@@ -3241,32 +3485,6 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <description>/firewall_rules_edit.php made changes</description>
       </created>
     </rule>
-    <rule uuid="45556904-9b06-478a-bf1f-606055aead04">
-      <type>pass</type>
-      <interface>opt2</interface>
-      <ipprotocol>inet46</ipprotocol>
-      <statetype>keep state</statetype>
-      <descr>Allow only internet</descr>
-      <direction>in</direction>
-      <quick>1</quick>
-      <source>
-        <network>opt2</network>
-      </source>
-      <destination>
-        <address>PrivateNet</address>
-        <not>1</not>
-      </destination>
-      <updated>
-        <username>root@10.0.1.131</username>
-        <time>1707427509.0213</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </updated>
-      <created>
-        <username>root@10.0.1.131</username>
-        <time>1707427477.6187</time>
-        <description>/firewall_rules_edit.php made changes</description>
-      </created>
-    </rule>
     <rule uuid="7f31a0ad-0a61-433a-a7b0-d7b962cc3e6a">
       <type>pass</type>
       <interface>opt2</interface>
@@ -3320,28 +3538,81 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <description>/firewall_rules_edit.php made changes</description>
       </created>
     </rule>
-    <rule uuid="548b4f83-fa9f-485e-98e8-d5db076755f8">
+    <rule uuid="850ca602-7442-49aa-bad8-d759dbdb23cf">
       <type>pass</type>
       <interface>opt2</interface>
       <ipprotocol>inet</ipprotocol>
       <statetype>keep state</statetype>
-      <descr>watch to phone test</descr>
+      <descr>Allow  my phone to admin pihole</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp</protocol>
+      <source>
+        <address>dion_phone</address>
+      </source>
+      <destination>
+        <address>PiHole</address>
+        <port>443</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1769710119.11</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1769710119.11</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="e128dcf1-03c3-4577-b267-ecd5ecbbeb20">
+      <type>pass</type>
+      <interface>opt2</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>temporary - connect phone to guest tv</descr>
       <direction>in</direction>
       <quick>1</quick>
       <source>
         <address>dion_phone</address>
       </source>
       <destination>
-        <address>10.0.30.12</address>
+        <address>10.0.40.109/32</address>
       </destination>
       <updated>
         <username>root@10.0.20.24</username>
-        <time>1759472489.87</time>
+        <time>1770555072.25</time>
         <description>/firewall_rules_edit.php made changes</description>
       </updated>
       <created>
         <username>root@10.0.20.24</username>
-        <time>1759472489.87</time>
+        <time>1770555049.56</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
+    <rule uuid="45556904-9b06-478a-bf1f-606055aead04">
+      <type>pass</type>
+      <interface>opt2</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Allow only internet</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <source>
+        <network>opt2</network>
+      </source>
+      <destination>
+        <address>PrivateNet</address>
+        <not>1</not>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1770553397.83</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.1.131</username>
+        <time>1707427477.6187</time>
         <description>/firewall_rules_edit.php made changes</description>
       </created>
     </rule>
@@ -3840,6 +4111,33 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <description>/firewall_rules_edit.php made changes</description>
       </created>
     </rule>
+    <rule uuid="54d40b1a-3c0b-4b1a-9964-d20d163f181b">
+      <type>pass</type>
+      <interface>opt4</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>Allow samba to TrueNAS</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <protocol>tcp/udp</protocol>
+      <source>
+        <address>Trading3</address>
+      </source>
+      <destination>
+        <address>TrueNAS</address>
+        <port>445</port>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1769703176.17</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1769703176.17</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
     <rule uuid="b6ba4244-ea27-4355-a046-0153fcdcdf8a">
       <type>pass</type>
       <interface>opt4</interface>
@@ -4079,6 +4377,31 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <description>/firewall_rules_edit.php made changes</description>
       </created>
     </rule>
+    <rule uuid="d2f128aa-e315-4c85-8e26-1081569ba8d7">
+      <type>pass</type>
+      <interface>opt4</interface>
+      <ipprotocol>inet</ipprotocol>
+      <statetype>keep state</statetype>
+      <descr>allow jellyfin on the TV (guest network)</descr>
+      <direction>in</direction>
+      <quick>1</quick>
+      <source>
+        <address>10.0.40.16/32</address>
+      </source>
+      <destination>
+        <address>nginx,jellyfin</address>
+      </destination>
+      <updated>
+        <username>root@10.0.20.24</username>
+        <time>1770555879.37</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </updated>
+      <created>
+        <username>root@10.0.20.24</username>
+        <time>1770555846.78</time>
+        <description>/firewall_rules_edit.php made changes</description>
+      </created>
+    </rule>
     <rule uuid="e7fa117a-c3c2-427a-b442-20b9bc3f5936">
       <type>pass</type>
       <interface>opt4</interface>
@@ -4332,6 +4655,7 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <time>1708430788.2194</time>
         <description>/firewall_rules_edit.php made changes</description>
       </created>
+      <disabled>1</disabled>
     </rule>
     <rule uuid="792562f1-9ab5-4432-8b72-d9cfb8462f28">
       <type>pass</type>
@@ -4834,15 +5158,15 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
   </widgets>
   <revision>
     <username>root@10.0.20.24</username>
-    <description>/services_dhcp_edit.php made changes</description>
-    <time>1769697908.72</time>
+    <description>/system_general.php made changes</description>
+    <time>1772458638.51</time>
   </revision>
   <OPNsense>
     <Firewall>
-      <Category version="1.0.0">
+      <Category version="1.0.0" persisted_at="1770555879.39" description="Firewall categories">
         <categories/>
       </Category>
-      <Alias version="1.0.1" persisted_at="1760527265.00">
+      <Alias version="1.0.1" persisted_at="1772136586.81" description="Firewall aliases">
         <geoip>
           <url/>
         </geoip>
@@ -5335,6 +5659,41 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
             <categories/>
             <description>minecraft proxy server (velocity)</description>
           </alias>
+          <alias uuid="0ae14e1b-1094-4093-9038-70748b623865">
+            <enabled>1</enabled>
+            <name>Trading3</name>
+            <type>host</type>
+            <path_expression/>
+            <proto/>
+            <interface/>
+            <counters>0</counters>
+            <updatefreq/>
+            <content>10.0.40.33</content>
+            <password/>
+            <username/>
+            <authtype/>
+            <expire/>
+            <categories/>
+            <description>VM for trading</description>
+          </alias>
+          <alias uuid="6ed105e5-e819-4358-94c6-67463136adfa">
+            <enabled>1</enabled>
+            <name>Study_stack</name>
+            <type>host</type>
+            <path_expression/>
+            <proto/>
+            <interface/>
+            <counters>0</counters>
+            <updatefreq/>
+            <content>10.0.10.61
+10.0.10.62</content>
+            <password/>
+            <username/>
+            <authtype/>
+            <expire/>
+            <categories/>
+            <description>two vms with apps for studying</description>
+          </alias>
         </aliases>
       </Alias>
       <Lvtemplate version="0.0.1">
@@ -6075,9 +6434,9 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         </cronjobs>
       </maintenance>
     </HAProxy>
-    <cron version="1.0.4" persisted_at="1768032324.88">
+    <cron version="1.0.4" persisted_at="1772457719.80" description="Cron settings">
       <jobs>
-        <job uuid="2ac8573f-27b6-405e-99d8-5ac9422a3a4b">
+        <job uuid="87103dbf-ad73-4196-9d8a-6cf3bc71ff86">
           <origin>Zenarmor</origin>
           <enabled>1</enabled>
           <minutes>*</minutes>
@@ -6754,7 +7113,7 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
       </gateway_item>
     </Gateways>
     <wireguard>
-      <server version="1.0.1" persisted_at="1768032572.05" description="WireGuard instance configuration">
+      <server version="1.0.1" persisted_at="1770077279.49" description="WireGuard instance configuration">
         <servers>
           <server uuid="8e2b4ef0-f38c-4c56-be46-c4240551f0ef">
             <enabled>1</enabled>
@@ -6769,17 +7128,17 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
             <disableroutes>0</disableroutes>
             <gateway/>
             <carp_depend_on/>
-            <peers>d13df78b-0ca7-48ea-8bea-18d0dd30da2b,9a75fa70-916f-4e33-937d-f2c9b2be79f2,9e2b8390-3664-41e6-9bd2-a78ab1d7e2bc</peers>
+            <peers>d13df78b-0ca7-48ea-8bea-18d0dd30da2b,9a75fa70-916f-4e33-937d-f2c9b2be79f2,9e2b8390-3664-41e6-9bd2-a78ab1d7e2bc,0343e323-9c14-45cb-ad07-714d401563db</peers>
             <debug>0</debug>
             <endpoint>wireguard.dss.mywire.org:51820</endpoint>
             <peer_dns>10.0.8.1</peer_dns>
           </server>
         </servers>
       </server>
-      <general version="0.0.1">
+      <general version="0.0.1" persisted_at="1770077282.64" description="WireGuard configuration">
         <enabled>1</enabled>
       </general>
-      <client version="1.0.0">
+      <client version="1.0.0" persisted_at="1770077279.52" description="WireGuard peer configuration">
         <clients>
           <client uuid="d13df78b-0ca7-48ea-8bea-18d0dd30da2b">
             <enabled>1</enabled>
@@ -6803,7 +7162,7 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
           </client>
           <client uuid="9a75fa70-916f-4e33-937d-f2c9b2be79f2">
             <enabled>1</enabled>
-            <name>DellXPS13</name>
+            <name>DellXPS13Win</name>
             <pubkey>nJTf1MoV63f2Wh+spqY2Wc0ZTL3Q82bomH43J94SSUE=</pubkey>
             <psk/>
             <tunneladdress>10.0.8.10/32</tunneladdress>
@@ -6811,6 +7170,16 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
             <serverport/>
             <keepalive/>
           </client>
+          <client uuid="0343e323-9c14-45cb-ad07-714d401563db">
+            <enabled>1</enabled>
+            <name>XPS13Linux</name>
+            <pubkey>8k++HneXqiLm6hIjgY1cuv9MSm2Uv+xGSNHW6Otc1CU=</pubkey>
+            <psk/>
+            <tunneladdress>10.0.8.13/32</tunneladdress>
+            <serveraddress/>
+            <serverport/>
+            <keepalive/>
+          </client>
         </clients>
       </client>
     </wireguard>
@@ -6859,7 +7228,7 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <ha_peers/>
       </dhcp6>
     </Kea>
-    <Zenarmor version="0.0.0" persisted_at="1768032321.53">
+    <Zenarmor version="0.0.0" persisted_at="1772457716.74" description="OPNsense Zenarmor Application">
       <zenvpn>
         <enabled>1</enabled>
       </zenvpn>
@@ -6876,21 +7245,21 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <sessionInactivityTimeout>28800</sessionInactivityTimeout>
       </sso>
       <cti>
-        <enabled>false</enabled>
-        <globalCtiHost>cti.zenarmor.net</globalCtiHost>
+        <enabled>true</enabled>
+        <globalCtiHost>tier2-cti.zenarmor.net</globalCtiHost>
         <globalCtiPort>2096</globalCtiPort>
       </cti>
       <general>
-        <installTimestamp>1768032306</installTimestamp>
-        <heartbeatTimer>40 1,9,18 * * *</heartbeatTimer>
+        <installTimestamp>1772457690</installTimestamp>
+        <heartbeatTimer>31 1,9,18 * * *</heartbeatTimer>
         <coreFileEnable>false</coreFileEnable>
         <showWanIface>false</showWanIface>
         <flavor>100</flavor>
         <healthCheck>true</healthCheck>
         <healthShare>true</healthShare>
-        <healthTimer>3,13,23,33,43,53 * * * *</healthTimer>
-        <updateTimer>54 * * * *</updateTimer>
-        <licenseCheckTimer>35 2,5,8,12,20 * * *</licenseCheckTimer>
+        <healthTimer>1,11,21,31,41,51 * * * *</healthTimer>
+        <updateTimer>2 * * * *</updateTimer>
+        <licenseCheckTimer>18 4,9,15,18,22 * * *</licenseCheckTimer>
         <heartbeatMonit>true</heartbeatMonit>
         <heartbeatData>true</heartbeatData>
         <hwbypass>false</hwbypass>
@@ -7088,6 +7457,15 @@ e+7APPmE4+Hdfyhcws1MAAAAG3Jvb3RAZ29uZG9yMi5kc3MubXl3aXJlLm9yZwEC&#13;
         <MinProtocol_DTLS/>
       </general>
     </trust>
+    <Hostwatch version="1.0.0" persisted_at="1772457863.76" description="Host discovery">
+      <general>
+        <enabled>1</enabled>
+        <promisc>0</promisc>
+        <verbose>0</verbose>
+        <skip_nets/>
+        <interface/>
+      </general>
+    </Hostwatch>
   </OPNsense>
   <ca uuid="a5958133-3563-452b-9bb4-7075fe182997">
     <refid>65b4a0e1c3356</refid>