WRKLOG-2026-03-19 :: Domus Digitalis

Summary

Wednesday. Don Quijote study system migrated (126 chapters). New DELE C1/C2 writing practice initiative: restart from Chapter I, write analysis in Spanish. Regex still critical carryover. PeopleSoft time entry urgent.

URGENT - All Domains

Professional Backlog

Carryover Backlog (CRITICAL)

Task	Details	Origin	Days	Status
k3s NAT verification	NAT rule 170 for 10.42.0.0/16 pod network - test internet connectivity	2026-03-09	29	P0 - BLOCKING
Wazuh indexer recovery	Restart pod after NAT confirmed working - SIEM visibility blocked	2026-03-09	29	P0 - Blocked by k3s
Strongline Gateway VLAN fix	8 devices in wrong identity group (David Rukiza assigned)	2026-03-16	22	P0 - TODO
Monad Pipeline Evaluation	Test pipeline creation, input sources, transforms (LEAD ROLE)	2026-03-11	27	P1 - TODO
Vocera EAP-TLS Supplicant Fix	~10 phones failing 802.1X, missing supplicant config	2026-03-12	26	P1 - TODO
ISE MnT Messaging Service	Enable "Use ISE Messaging Service for UDP syslogs delivery"	2026-03-12	26	P2 - TODO
ISE Patch 9 upgrade	ISE 3.2 Patch 9 addresses known replication issues	2026-03-12	26	P2 - TODO

Professional backlog remains critical. Monad evaluation 8+ days carried.

Personal Blockers

BLOCKERS — Fix Immediately

Task	Details	Origin	Days	Impact
Z Fold 7 Termux	gopass and SSH not working	2026-03-10	25	BLOCKER — Cannot access passwords on mobile
gopass v3 organization	Inconsistent structure, poor key-value usage	2026-03-20	15	Inefficient password management, no aggregation

Life Admin

URGENT - Requires Immediate Action

Item	Details	Deadline	Status	Impact
Housing Search	Granada Hills area - apartments/rooms	TBD	In Progress	Quality of life, commute

Item

Details

Deadline

Status

Impact

Housing Search

Granada Hills area - apartments/rooms

TBD

In Progress

Quality of life, commute

Certification Deadlines

URGENT — Performance Review Deadline (June 1, 2026)

Certification	Provider	Deadline	Status	Impact
CISSP	ISC² — Certified Information Systems Security Professional	June 1, 2026	ACTIVE — Phase 0 (Project)	Required for performance review
RHCSA 9	Red Hat Certified System Administrator	June 1, 2026	ACTIVE — 21-phase curriculum (Project)	Required for performance review

Certification

Provider

Deadline

Status

Impact

CISSP

ISC² — Certified Information Systems Security Professional

June 1, 2026

ACTIVE — Phase 0 (Project)

Required for performance review

RHCSA 9

Red Hat Certified System Administrator

June 1, 2026

ACTIVE — 21-phase curriculum (Project)

Required for performance review

55 days remaining until June 1st deadline.

Early Morning - 5:30am

Regex Training (CRITICAL CARRYOVER)

Session 3 - Character classes, word boundaries
Practice drills from regex-mastery curriculum
Status: 3 days carried over - DO THIS TODAY

Regex training continues to slip. This is the foundation for all CLI mastery.

Work (CHLA)

CHARGE TIME IN PEOPLESOFT - CRITICAL. Do this NOW before anything else.

PeopleSoft Time Entry Reference

Critical (P0)

Project	Description	Owner	Status	Due	Blocker
Linux Research (Xianming Ding)	EAP-TLS for Linux workstations, dACL, UFW	Evan	BEHIND	02-24	Certificate "password required" - nmcli fix documented
iPSK Manager	Pre-shared key automation	Ben Castillo	BEHIND	—	DB replication issues
MSCHAPv2 Migration	Legacy auth deprecation	Evan	BEHIND	—	No progress on planning
Research Segmentation	All endpoints to Untrusted VLAN	Evan	BLOCKED	—	CISO decision pending

Project

Description

Owner

Status

Due

Blocker

Linux Research (Xianming Ding)

EAP-TLS for Linux workstations, dACL, UFW

Evan

BEHIND

02-24

Certificate "password required" - nmcli fix documented

iPSK Manager

Pre-shared key automation

Ben Castillo

BEHIND

—

DB replication issues

MSCHAPv2 Migration

Legacy auth deprecation

Evan

BEHIND

—

No progress on planning

Research Segmentation

All endpoints to Untrusted VLAN

Evan

BLOCKED

—

CISO decision pending

High Priority (P1)

Project	Description	Owner	Status	Target
ISE 3.4 Migration	Upgrade from 3.2p9	Evan	Blocked	Q1 2026
Switch Upgrades	IOS-XE fleet update (C9300, 3560CX)	Evan	Pending	Q1 2026
Spikewell BYOD VPN	dACL SQL, AD group integration	Evan	Active	—
Strongline Gateway	MAC capture, Identity Group setup	Evan	Active	—
QRadar → Sentinel Migration	Full SIEM platform transition, Monad evaluation	Evan	Active	Q2 2026

Project

Description

Owner

Status

Target

ISE 3.4 Migration

Upgrade from 3.2p9

Evan

Blocked

Q1 2026

Switch Upgrades

IOS-XE fleet update (C9300, 3560CX)

Evan

Pending

Q1 2026

Spikewell BYOD VPN

dACL SQL, AD group integration

Evan

Active

—

Strongline Gateway

MAC capture, Identity Group setup

Evan

Active

—

QRadar → Sentinel Migration

Full SIEM platform transition, Monad evaluation

Evan

Active

Q2 2026

Strategic (P2)

Project	Description	Owner	Status
HHS Regulatory Compliance	New HHS security policies implementation	TBD	NOT STARTED
InfoSec Reporting Dashboard	PowerBI metrics for executives	TBD	NOT STARTED
EDR Migration (AMP → Defender)	Endpoint protection consolidation	TBD	NOT STARTED
Azure Legacy Migration	Modern landing zone	Team	In Progress
ChromeOS EAP-TLS	SCEP + Victor, Paul testing	Victor	In Progress

Project

Description

Owner

Status

HHS Regulatory Compliance

New HHS security policies implementation

TBD

NOT STARTED

InfoSec Reporting Dashboard

PowerBI metrics for executives

TBD

NOT STARTED

EDR Migration (AMP → Defender)

Endpoint protection consolidation

TBD

NOT STARTED

Azure Legacy Migration

Modern landing zone

Team

In Progress

ChromeOS EAP-TLS

SCEP + Victor, Paul testing

Victor

In Progress

Case Studies (March 2026)

TAC Cases:

TAC-2026-03 - 802.1X Auth Failures

Incidents:

Changes:

CR - Vault Backup SELinux

RCAs:

Today’s Priorities

P0 - Strongline Gateway VLAN fix (blocking Arin - 2 days)
P0 - k3s NAT verification (10 days carried - CRITICAL)
P1 - Monad Pipeline Evaluation (8 days - CRITICAL)
P1 - Wazuh indexer recovery (blocked by NAT)

Notes

Day-specific work notes here.

Session Accomplishments (Claude Code)

Don Quijote Migration Complete

Migrated full study system from Principia to domus-captures:

Component Details

Component	Details
Total Chapters	126 (52 Primera Parte + 74 Segunda Parte)
Structure	`quijote/{primera-parte,segunda-parte}/capitulo-NNN.adoc`
Template Sections	Resumen, Personajes, Análisis Literario, Simbolismo, Reflexiones, Citas, Contexto, Intertextualidad, Interpretaciones, Vocabulario, Actividades, Preguntas
Migration Script	`scripts/migrate-quijote.sh`
Status Tracking	Primera Parte caps I-XXXII complete, XXXIII in progress

Total Chapters

126 (52 Primera Parte + 74 Segunda Parte)

Structure

quijote/{primera-parte,segunda-parte}/capitulo-NNN.adoc

Template Sections

Resumen, Personajes, Análisis Literario, Simbolismo, Reflexiones, Citas, Contexto, Intertextualidad, Interpretaciones, Vocabulario, Actividades, Preguntas

Migration Script

scripts/migrate-quijote.sh

Status Tracking

Primera Parte caps I-XXXII complete, XXXIII in progress

Commits:

d8dd251 - feat(literature): Migrate Don Quijote study system from Principia (131 files, 19,011 insertions)

Navigation:

Personal

In Progress

Project	Description	Status	Notes
k3s Platform	Production k3s cluster on kvm-01	Active	Prometheus, Grafana, Wazuh deployed
Wazuh Archives	Enable archives indexing in Filebeat	Active	PVC fix pending
kvm-02 Hardware	Supermicro B deployment	Active	Hardware ready, RAM upgrade done

Project

Description

Status

Notes

k3s Platform

Production k3s cluster on kvm-01

Active

Prometheus, Grafana, Wazuh deployed

Wazuh Archives

Enable archives indexing in Filebeat

Active

PVC fix pending

kvm-02 Hardware

Supermicro B deployment

Active

Hardware ready, RAM upgrade done

Planned

Project	Description	Target	Blocked By
Vault HA (3-node)	vault-02, vault-03 on kvm-02	Q1 2026	kvm-02 deployment
k3s HA (3-node)	Control plane HA	Q1 2026	kvm-02 deployment
ArgoCD GitOps	k3s GitOps deployment	After k3s stable	—
MinIO S3	Object storage for k3s	After ArgoCD	—
Domus Inventory	Personal asset management (YAML + CLI + AsciiDoc)	Q2 2026	Schema approved

Project

Description

Target

Blocked By

Vault HA (3-node)

vault-02, vault-03 on kvm-02

Q1 2026

kvm-02 deployment

k3s HA (3-node)

Control plane HA

Q1 2026

kvm-02 deployment

ArgoCD GitOps

k3s GitOps deployment

After k3s stable

—

MinIO S3

Object storage for k3s

After ArgoCD

—

Domus Inventory

Personal asset management (YAML + CLI + AsciiDoc)

Q2 2026

Schema approved

Active — Infrastructure

Task	Details	Priority	Status	Due
Wazuh agent deployment	Deploy agents to all infrastructure hosts	P2	Pending	After archives fix
k3s Platform	Production k3s cluster on kvm-01	P1	In Progress	—
Wazuh Archives	Enable archives indexing in Filebeat, PVC fix	P1	In Progress	—
kvm-02 Hardware	Supermicro B deployment, RAM upgrade done	P1	In Progress	—

Task

Details

Priority

Status

Due

Wazuh agent deployment

Deploy agents to all infrastructure hosts

P2

Pending

After archives fix

k3s Platform

Production k3s cluster on kvm-01

P1

In Progress

—

Wazuh Archives

Enable archives indexing in Filebeat, PVC fix

P1

In Progress

—

kvm-02 Hardware

Supermicro B deployment, RAM upgrade done

P1

In Progress

—

Active — Security & Encryption

Task	Details	Priority	Status	Due
Configure 4th YubiKey	SSH FIDO2 keys	P1	TODO	—
Cold storage M-DISC backup	age-encrypted archives	P1	TODO	After YubiKey setup

Task

Details

Priority

Status

Due

Configure 4th YubiKey

SSH FIDO2 keys

P1

TODO

—

Cold storage M-DISC backup

age-encrypted archives

P1

TODO

After YubiKey setup

Active — Development & Tools

Task	Details	Priority	Status	Due
netapi Commercialization	Go CLI rewrite with Cobra-style argument discovery, package for distribution	P0	Active	—
Ollama API Service	FastAPI (17 endpoints), productize — config audit, doc tools, runbook gen	P0	Active	—
Shell functions (fe, fec, fef)	File hunting helpers	P3	TODO	—

Task

Details

Priority

Status

Due

netapi Commercialization

Go CLI rewrite with Cobra-style argument discovery, package for distribution

P0

Active

—

Ollama API Service

FastAPI (17 endpoints), productize — config audit, doc tools, runbook gen

P0

Active

—

Shell functions (fe, fec, fef)

File hunting helpers

P3

TODO

—

Active — Documentation

Task	Details	Priority	Status	Due
D2 Catppuccin Mocha styling	domus-* spoke repos (177 files total)	P3	In Progress	—

Task

Details

Priority

Status

Due

D2 Catppuccin Mocha styling

domus-* spoke repos (177 files total)

P3

In Progress

—

Active — Financial

Task	Details	Priority	Status	Due
Amazon order history import	Download CSV from Privacy Central → parse with awk → populate subscriptions tracker	P1	Waiting	Pending Amazon data export (requested 2026-04-04)

Task

Details

Priority

Status

Due

Amazon order history import

Download CSV from Privacy Central → parse with awk → populate subscriptions tracker

P1

Waiting

Pending Amazon data export (requested 2026-04-04)

Active — Education

Task	Details	Priority	Status	Due
No active education tasks — see education trackers

Task

Details

Priority

Status

Due

No active education tasks — see education trackers

Active — Personal & Life Admin

Task	Details	Priority	Status	Due
ThinkPad T16g Setup	Arch install, stow dotfiles, Ollama stack, netapi dev env	P0	Pending	—
P50 Arch to Ubuntu migration	CR-2026-03-12	P2	In Progress	—
X1 Carbon Ubuntu installs	2 laptops, LUKS encryption	P2	In Progress	—
P50 Steam Test	Test Flatpak Steam + apt cleanup of broken i386 packages	P3	Pending	—

Task

Details

Priority

Status

Due

ThinkPad T16g Setup

Arch install, stow dotfiles, Ollama stack, netapi dev env

P0

Pending

—

P50 Arch to Ubuntu migration

CR-2026-03-12

P2

In Progress

—

X1 Carbon Ubuntu installs

2 laptops, LUKS encryption

P2

In Progress

—

P50 Steam Test

Test Flatpak Steam + apt cleanup of broken i386 packages

P3

Pending

—

Documentation Sites

docs.domusdigitalis.dev - Private documentation hub
docs.architectus.dev - Public portfolio site

Notes

Day-specific personal notes here.

Education

Active Tracks (Focus)

Skills Mastery (Critical)

Regex Mastery - 10-module curriculum
Python Mastery
Bash Mastery
AsciiDoc Docs - Documentation format
Antora Docs - Documentation pipeline

Certification Deadlines

CISSP - Before June 1, 2026 (performance review)
RHCSA 9 - Before June 1, 2026 (performance review)
LPIC-1 - Renewal required (blocks LPIC-2)

Language Certifications (DELE/SIELE)

Spanish C1 Certification Goals

Certification	Provider	Target	Status	Strategy
SIELE C1	Instituto Cervantes / UNAM / Salamanca	Q2 2026	ACTIVE	Computer-based, faster results - take FIRST
DELE C1	Instituto Cervantes	Q3/Q4 2026	PLANNED	After SIELE success, harder exam
DELE C2	Instituto Cervantes	2027	FUTURE	Mastery level - requires extensive immersion

Certification

Provider

Target

Status

Strategy

SIELE C1

Instituto Cervantes / UNAM / Salamanca

Q2 2026

ACTIVE

Computer-based, faster results - take FIRST

DELE C1

Instituto Cervantes

Q3/Q4 2026

PLANNED

After SIELE success, harder exam

DELE C2

Instituto Cervantes

2027

FUTURE

Mastery level - requires extensive immersion

SIELE is computer-adaptive, results in 3 weeks. DELE is paper-based, results in 3-4 months. Do SIELE first to validate readiness.

Don Quijote Writing Practice - DELE C1/C2 Initiative

NEW APPROACH: Restart from Chapter I with active writing practice.

Method:

Read chapter in original Spanish
Write personal analysis/understanding en español
AI review for grammar, vocabulary, register
Build comprehensive understanding of literary elements

Each Chapter Appendix Will Include:

Category	Purpose
Autores Mencionados	Feliciano de Silva, autor de Belianís, other libros de caballerías authors referenced
Personajes y Arquetipos	Character types: caballero andante, escudero, ventero, labrador, etc.
Intertextualidad	Amadís de Gaula, Belianís de Grecia, Palmerín, Orlando Furioso, La Biblia
Vocabulario Especial	Arcaísmos (fecho, fermosura), dobles sentidos (cola = peluca Y sexualidad)
Referencias Bíblicas/Clásicas	Biblical allusions, classical mythology, historical references
Juegos de Palabras	Cervantes' wordplay and linguistic humor

Today’s Study

Focus: Read Chapter I, begin written analysis
Language: 100% Spanish output
Template: Use enhanced chapter appendix structure
Complete Chapter I reading
Write 200+ word analysis in Spanish
Review with AI for corrections

Regex Training (CRITICAL)

Status: 3 days carried over
Priority: After PeopleSoft, before Quijote
Session: Character classes, word boundaries

Infrastructure

Documentation Sites

Site	URL	Status	Actions Needed
Domus Digitalis	docs.domusdigitalis.dev	Active	Validate, harden, improve
Architectus	docs.architectus.dev	Active	Public portfolio site - maintain

Site

URL

Status

Actions Needed

Domus Digitalis

docs.domusdigitalis.dev

Active

Validate, harden, improve

Architectus

docs.architectus.dev

Active

Public portfolio site - maintain

HA Deployment Status

System	Description	Status	Notes
VyOS HA	vyos-01 (kvm-01) + vyos-02 (kvm-02) with VRRP VIP	✅ COMPLETE	2026-03-07 - pfSense decommissioned
BIND DNS HA	bind-01 (kvm-01) + bind-02 (kvm-02) with AXFR	✅ COMPLETE	Zone transfer operational
Vault HA	Raft cluster (vault-01/02/03)	✅ COMPLETE	Integrated with PKI
Keycloak Rebuild	keycloak-01 corrupted, rebuild from scratch	🔄 NEXT	Priority P3 - SSO broken
FreeIPA HA	ipa-02 replica planned	📋 PLANNED	Linux auth redundancy
AD DC HA	home-dc02 replication	📋 PLANNED	Windows auth redundancy
iPSK Manager HA	ipsk-mgr-02 with MySQL replication	📋 PLANNED	PSK portal redundancy
ISE HA	PAN HA (ise-01 reconfigure)	⏳ DEFERRED	Wait until ise-02 stable
ISE 3.5 Migration	Upgrade path: 3.2p9 → 3.4 (P1) → 3.5 (target)	📋 PLANNED	After 3.4 Migration completes (Q2 2026)

System

Description

Status

Notes

VyOS HA

vyos-01 (kvm-01) + vyos-02 (kvm-02) with VRRP VIP

✅ COMPLETE

2026-03-07 - pfSense decommissioned

BIND DNS HA

bind-01 (kvm-01) + bind-02 (kvm-02) with AXFR

✅ COMPLETE

Zone transfer operational

Vault HA

Raft cluster (vault-01/02/03)

✅ COMPLETE

Integrated with PKI

Keycloak Rebuild

keycloak-01 corrupted, rebuild from scratch

🔄 NEXT

Priority P3 - SSO broken

FreeIPA HA

ipa-02 replica planned

📋 PLANNED

Linux auth redundancy

AD DC HA

home-dc02 replication

📋 PLANNED

Windows auth redundancy

iPSK Manager HA

ipsk-mgr-02 with MySQL replication

📋 PLANNED

PSK portal redundancy

ISE HA

PAN HA (ise-01 reconfigure)

⏳ DEFERRED

Wait until ise-02 stable

ISE 3.5 Migration

Upgrade path: 3.2p9 → 3.4 (P1) → 3.5 (target)

📋 PLANNED

After 3.4 Migration completes (Q2 2026)

Single Points of Failure (CRITICAL)

These systems have NO redundancy - outage impacts production.

System	Impact if Down	Mitigation
ISE (ise-02)	All 802.1X stops - wired and wireless auth fails	ise-01 reconfiguration deferred until ise-02 stable
Keycloak (keycloak-01)	SAML/OIDC SSO broken (ISE admin, Grafana, etc.)	NEXT PRIORITY - Rebuild runbook
FreeIPA (ipa-01)	Linux auth, sudo rules, HBAC fails	ipa-02 replica planned
AD DC (home-dc01)	Windows auth, Kerberos, GPO fails	home-dc02 replica planned
iPSK Manager	Self-service PSK portal unavailable	ipsk-mgr-02 with MySQL replication planned

System

Impact if Down

Mitigation

ISE (ise-02)

All 802.1X stops - wired and wireless auth fails

ise-01 reconfiguration deferred until ise-02 stable

Keycloak (keycloak-01)

SAML/OIDC SSO broken (ISE admin, Grafana, etc.)

NEXT PRIORITY - Rebuild runbook

FreeIPA (ipa-01)

Linux auth, sudo rules, HBAC fails

ipa-02 replica planned

AD DC (home-dc01)

Windows auth, Kerberos, GPO fails

home-dc02 replica planned

iPSK Manager

Self-service PSK portal unavailable

ipsk-mgr-02 with MySQL replication planned

Validation Tasks

Task	Details	Status
docs.domusdigitalis.dev validation	Test all cross-references, search, rendering	TODO
docs.domusdigitalis.dev hardening	HTTPS, CSP headers, security review	TODO
docs.architectus.dev validation	Public site content review	TODO
Hub-spoke sync verification	All components building correctly	Ongoing

Task

Details

Status

docs.domusdigitalis.dev validation

Test all cross-references, search, rendering

TODO

docs.domusdigitalis.dev hardening

HTTPS, CSP headers, security review

TODO

docs.architectus.dev validation

Public site content review

TODO

Hub-spoke sync verification

All components building correctly

Ongoing

Quick Commands

Push Don Quijote Migration

# SSH agent needs unlock first
ssh-add ~/.ssh/id_ed25519

# Push domus-captures
git -C ~/atelier/_bibliotheca/domus-captures push origin main

# Trigger docs rebuild
git -C ~/atelier/_bibliotheca/domus-docs commit --allow-empty -m "chore: Trigger rebuild for Don Quijote migration"
git -C ~/atelier/_bibliotheca/domus-docs push origin main

Monad Quick Start

dsource d000 lab/app
netapi monad pipelines
netapi monad input-search cisco