Known Issues and Quirks

Last updated: 2026-07-04

WikiDocs

Do not create nested filesystem subfolders under /home/docker/wikidocs/datasets/documents/ purely for organization. It previously caused generated bullet-list/sidebar rendering bugs.
Use frontmatter category: instead, for example:
```
---
category: infrastructure
---
```
Live patch locations in the container:
- /var/www/localhost/htdocs/classes/Document.class.php
- /var/www/localhost/htdocs/template.inc.php
Dataset content is git-synced from /home/docker/wikidocs. Local commits must be pushed to origin/main immediately. If they are not pushed, a later sync or manual reset to origin/main will resurrect stale content like an undead documentation problem.
Incident note: on 2026-06-26, local-only June 23 WikiDocs commits were discarded by a manual git reset --hard origin/main, which flattened category-grouped navigation and restored removed content until the corrected state was committed and pushed.
This deployment does not use a live database.db index file. After content changes, restart wikidocs-wikidocs-1 and verify rendered pages over HTTP. HTTP 200 alone is worthless because WikiDocs renders styled 404 pages.

UniFi switch Port 3 has a historical speed/duplex mismatch issue. Before blaming services or storage, verify negotiated speed/duplex and the physical peer/cable.
Current affected switch, peer device, and current negotiated state: NEEDS VERIFICATION.

PBS restore/backup performance clue: PBS datastore path /mnt/datastore/PVE is NFSv3 with noatime to 10.10.10.230:/PVE; a historical bottleneck clue is a default nic0 negotiating at 1GbE full duplex.
QNAPNAS3 /PVE is on /share/CACHEDEV1_DATA/PVE, DataVol1 ext4, HDD RAID5 3x12.73TB WDC, SSD cache enabled 2x Crucial CT2000P3SSD8 RAID1.

Portainer 2.39 exec/write operations require X-Csrf-Token plus Referer when automating against the API. Skip that and the API slaps you, correctly.
Portainer endpoint map currently known:
- endpoint 2: local / 10.10.10.237
- endpoint 3: 10.10.10.76
- endpoint 4: QNAPNAS3 10.10.10.230:2376 TLS
- endpoint 5: QNAPNAS2 10.10.10.231:2376 TLS
- endpoint 6: QNAPNAS1 10.10.10.232:2376 TLS
Homarr Redis on 10.10.10.237 persists under /data/compose/22/homarr/appdata/redis on the host (/appdata/redis in-container). If ioredis AggregateError/TRPC retry storms return, suspect corrupt dump.rdb; quarantine it, run Redis, verify redis-cli PING and redis-check-rdb after SAVE.
Watchtower must remain monitor-only. Do not switch it to auto-update.

Stored Proxmox token ID must be root@pam!hermes. A malformed root@pamhermes variant has appeared before and will fail.
Credentials are loaded from ~/.hermes/.env, not random shell history archaeology.

SSH currently works from Hermes as michaeld to 10.10.10.237 and 10.10.10.76.
SSH as michaeld to 10.10.10.251 and 10.10.10.77 failed during this update; use APIs or the correct account/credential path.

Current UniFi Port 3 negotiated speed/duplex, cable/peer, and whether the issue is fixed or just historically known.
Whether Adguard2 at 10.10.10.157:3013 is intentionally down; Uptime Kuma reported it down and ping failed during this update.
Full list of QNAP Container Station apps outside Portainer/Hermes control.