docs(wiki): sub-project 4 — per-sub-version Business->Community base map from opnsense/changelog
Configuration-Editor: document the ids_policy curated template kind (v0.13.0)
docs: note OPNGMS is bounded by the OPNsense API + public plugins
Architecture gains a 'Scope & limitations' section; Configuration-Editor
gains a 'Coverage limits' subsection under The catalog — both stating that
OPNGMS is a client of the OPNsense API (can't do what the API doesn't
expose; non-MVC settings read-only) and that the catalog/plugin coverage is
built from public opnsense/core + opnsense/plugins, so Business-only plugins
are not covered.
docs: add Screenshots page; accurate MASTER_KEY rotation (all 5 encrypted columns); mark editor 3c shipped
docs: add UI screenshots to key wiki pages
Embed product screenshots (referenced from the main repo's docs/ui via raw
GitHub URLs) on Home, Architecture, Configuration-Editor, Reporting, Log-Lake,
and Security.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
docs: comprehensive OPNGMS wiki (install, architecture, config, editor, log lake, security, reporting, ops)
Add the full operator + contributor manual as 12 wiki pages, every claim
grounded in the repository:
- Home / _Sidebar — overview and persistent navigation
- Installation — prerequisites, four TLS models, pull & start, first run
- Architecture — component diagram, services, data flows, RLS multi-tenancy
- Configuration — complete environment-variable reference
- Upgrading — pull+up flow, version pinning, backups, MASTER_KEY rotation
- Configuration-Editor — the version-aware editor & catalog pipeline (3a/3b
built; 3c diff/config.xml-map fenced as planned/not-built)
- Log-Lake — the optional mTLS syslog to OpenSearch lake
- Reporting — SMTP delivery, per-tenant settings, schedules
- Security — RLS, encrypted-at-rest secrets, MFA, CI scans, hardening
- Troubleshooting — grouped symptom to cause to fix
- Development — local dev, tests, CI, contribution flow
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>