Architecture: - Remove Chrome extension (project fully device-side, no target-machine deps) - Update all docs from "three-layer" to "two-layer" privacy (video redact + network intercept) - Add comprehensive architecture docs (overview, subsystem designs) Services: - kvm_agent: hybrid planner (template/local/cloud), screen state detection, mouse-first architecture, app launcher, visual workflow tests - privacy_gateway: upload scanner, privacy LLM integration, REST API - doc_processor: new document processing service Deployment: - Add kvm-bridge, kvm-meta, kvm-privacy deb package definitions - New systemd services (doc-processor, kvm-gateway, rkllm-server) - Network deploy configs, journald forwarding - Remove secrets.env templates from packages Plans & Docs: - HDMI-TX DRM local output + OSD design (drm_output.c, VOP2 multi-plane) - AI Agent token optimization plan (72% savings via caching/pruning/fingerprint) - Model sync: all RKNN/ONNX models now in project directory - Native H.264 adaptive bitrate plan Submodules updated: - deps/KVM: WebUI i18n, RBAC, DDNS, Agent API, OCR models (LFS) - deps/embedding: models synced (LFS), benchmarks, Ollama backend - deps/info-privacy-rs: regex PII detection, face detection integration Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
33 lines
666 B
Plaintext
33 lines
666 B
Plaintext
# dnsmasq-lan.conf — DHCP + DNS for KVM controlled PC on LAN (eth1)
|
|
#
|
|
# Controlled PC gets: IP 10.42.0.100-200, GW 10.42.0.1, DNS 10.42.0.1
|
|
# dnsmasq forwards DNS upstream via /etc/resolv.conf
|
|
|
|
# Only listen on LAN interface
|
|
interface=eth1
|
|
bind-interfaces
|
|
|
|
# DHCP range: 10.42.0.100 to 10.42.0.200, lease 12 hours
|
|
dhcp-range=10.42.0.100,10.42.0.200,12h
|
|
|
|
# Gateway = this device
|
|
dhcp-option=3,10.42.0.1
|
|
|
|
# DNS = this device (dnsmasq also serves DNS)
|
|
dhcp-option=6,10.42.0.1
|
|
|
|
# Domain
|
|
domain=kvm.local
|
|
|
|
# Logging
|
|
log-dhcp
|
|
|
|
# Do not read /etc/hosts
|
|
no-hosts
|
|
|
|
# PID file
|
|
pid-file=/run/kvm-dnsmasq.pid
|
|
|
|
# Do not daemonize (systemd manages lifecycle)
|
|
keep-in-foreground
|