# night-grind-plan.md — unattended session plan (2026-09-01 → 09-02)

> Approved-scope working file; knowledge docs on Discourse: https://community.turnsys.com/c/vp-techops
> Founder answers to blocking questions land in HomeAssistant/needfromcharles.md — check it at each phase.

## Phase order (each ends verified + documented; tickets/audit updated per item)

1. **Verify Server-Room dashboard rendered** (commit 88f2a53; auto-restart fired).
   `lovelace` dashboards list via websocket; confirm pfv-server-room present.
2. **SNMP temp migration** [#618] — temps live end-to-end:
   a. TDD: `-n` numeric mode (plain °C float) in dcinfra/sensors/temper/lmsensors-extend.sh
   b. Deploy `lmsensors_n` extend to the 6 hosts (#458 pattern, serial)
   c. 16 SNMP config entries via REST flow (host+community+manual OID, device_class temperature)
   d. Remove dead packages/plant-snmp.yaml from KNEL/pfv-bms; verify sensors in areas + dashboard
3. **Cloudron global HA** [#626]: version check (needs ≥2025.7) → mint pfv-bms long-lived
   token (websocket `auth/long_lived_token`) → configure remote pairing on
   building-management.knownelement.com → verify pfv-bms entities visible there.
4. **Privacy scoping** [#627]: per-user dashboards; health/location entities hidden from
   non-founder users; document residual ACL limits.
5. **iDRAC probes** [#625]: DNS/port probe pfv-tsys6-oob + pfv-tsys7-oob; Redfish walk if
   live; wire into LibreNMS or HA where trivial; report otherwise.
6. **Backup + hygiene**: `ha backups new` (verify), docker image prune (~6GB), Grafana
   datasource check + starter Server-Room dashboard (grafana env at ~/.creds/grafana.env).
7. **Docs**: Discourse topic for HomeAssistant ops (point HomeAssistant/README.md at it),
   audit-log entry, WORKING.md, ticket notes.

## Explicitly NOT tonight (needs founder or hardware)
- UniFi AP mDNS/multicast toggle (#619) — READ-ONLY inspection at most; change needs approval
- Midea token / HomeKit pairing / Govee devices / Emporia / Tripp Lite — see
  HomeAssistant/needfromcharles.md + Friday #629
- k8s rebuild (#367/#368) — timing decision pending
- HA high availability (#628) — founder-excluded
- Any restart of BOTH members of a redundant pair (hard rule)