Ports 80 and 443 must be open in UFW so LAN clients using split DNS
can reach nginx directly without going through pfSense NAT.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Server overview (README.md) with services, storage, and network summary
- Storage layout with disk/fstab/mount details (storage.md)
- Service docs: Samba, NFS, Squid, Pi-hole (with DHCP/split-DNS notes)
- Let's Encrypt cert via acme.sh + GoDaddy DNS-01 (ssl/)
- nginx SSL reverse proxy config and virtual host guide (nginx/)
- Pi-hole moved to port 8081; split DNS overrides documented for both
Pi-hole and pfSense Unbound to avoid hairpin NAT issues
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
