PFVCluster/questions-09022206.md

Working ask-file; knowledge docs live on Discourse: https://community.turnsys.com/c/vp-techops (audit log: https://community.turnsys.com/t/298)

questions-09022206.md — consolidated open asks (2026-09-02)

Merged from questions-v2.md (repo root) + HomeAssistant/needfromcharles.md per founder request; both source files since removed (history in git). Answer inline; agent checks before asking again.

HA / monitoring (was needfromcharles)

1. Minisplit (Midea/Carrier) — blocks #614

Login charles@turnsys.com rejected by all three Midea cloud backends.

• Exact app name on your phone that controls the minisplit:
• Account email that app uses:

2. Govee — blocked on hardware path (#620/#683)

Integration live (key+account+MQTT); account has ZERO cloud devices = BLE-only.

• Sensor model numbers (decides BLE dongle vs hub):
• API key — received + configured (2026-09-02)

3. HomeKit codes — blocks #619 pairing (ecobee multicast-reachable NOW)

• ecobee 8-digit code:
• Lock brand/model: (verdict 2026-09-02: BLE-only — DHCP can't name it)
• Lock HomeKit code:

4. Emporia Vue 3 — blocks #623 (BTU loop)

• Ordered? ETA:

9. iDRAC — RESOLVED 2026-09-02

[x] Creds worked; both SNMP agents live; tsys6 public accepted by founder.

NEW (2026-09-02)

10. DVR → MotionEye (#711)

• DVR login (any user):
• Channel count: (Night Owl; RTSP format documented on #711)

11. DIRIGERA Matter code (#712) — when you're back at the house

• IKEA app → hub → integrations → share via Matter (11-digit code)

12. WiZ bulb→room mapping (#712) — Friday onsite

2 bulbs reserved (pfv-wiz-bulb-1/2 @ 192.168.1.150/.151); map MACs→rooms, then HA WiZ entries by host + we identify the other ~11 lights' integration.

General (was questions-v2)

Q7. Close #167 (old garage UPS rebuild, superseded)? — still open

Q9. Session-start gate relaxation — superseded by scope-alignment gate

Q10. Git flow: keep direct-push for PFVCluster? — still open (default: keep)

(Q8 Friday order — moot, that Friday passed)

Founder decisions pending

• #626 Cloudron HA access architecture (a/b/c on ticket — recommend proxy)
• #684 PBS session scheduling (+ drive-rotation target design)
• TasmoAdmin uninstall (stopped+disabled 2026-09-02 — full uninstall?)
• Govee disabled dup entry: one-click delete in HA UI

13. Cloudron API token (#685/#727) — unblocks API-first access

The #685 perf investigation ran over raw SSH (root@my.knownelement.com) because no panel API token exists. A token (read scope minimum) lets the agent use the Cloudron API (apps/configs/backups) instead of shell — cleaner audit trail and the path for AWX/Ansible modules. Also tracked in KNEL/cloudron questions-v1.md (https://git.knownelement.com/KNEL/cloudron).

• Create token (panel: my.knownelement.com → profile → API access)
• Material value → ~/.creds/cloudron.env as CLOUDRON_API_TOKEN=

14. docker daemon.json bounce window — my.knownelement.com (#727)

One planned dockerd restart (ALL ~300 containers bounce; live-restore=false today, so no zero-downtime path) to apply nofile 262144 defaults + log rotation + live-restore. Script ready: KNEL/cloudron perf/docker-daemon.json.planned. Until then the postgres nofile bridge is ephemeral (lost on postgres container recreate). Detail: t/316.

• Pick a window (suggest pre-storm weekday morning)