# Spec 024 — Tasks

**Concluída:** 2026-06-17  
**Validação:** HTTPS activo · bridge OpenPanel OK · testprov1 + brtest524

## VM123 Proxmox
- [x] Executar `proxmox-create-vm123.sh` no host PVE
- [x] VM123 online — IP 10.10.10.123/24
- [x] DNAT SSH WAN :2523 → VM123:22 (pfSense id **61**)

## Bootstrap
- [x] `bootstrap-vm123.sh` — mini, admin, root (805353)
- [x] fail2ban activo
- [x] Wazuh agent → 10.10.10.104
- [x] Swap 2 GB

## Docker FOSS + Odoo
- [x] `docker compose up -d` em `/opt/vm123-finance-stack`
- [x] Wizard FOSSBilling (admin@ligbox.com.br)
- [x] Wizard Odoo 16 (base ligbox)
- [x] `setup-foss-openpanel-module.sh`
- [x] Antispam honeypot `lb_hp_x9k2` (`setup-foss-antispam.sh`)

## OpenPanel
- [x] `install-openpanel.sh` — Community 1.7.60
- [x] Bridge Community API (`install-openpanel-community-bridge.sh`) porta 18087
- [x] Planos hosting — `ligbox-site-cms` (id 3)
- [x] Test connection FOSS → bridge OK
- [x] Provisionamento OpenPanel validado (bridge E2E + testprov1 manual)

## Traefik + DNS
- [x] DNS financeiro + openpanel → IP público (Cloudflare)
- [x] Rotas Traefik CT114 (FOSS raiz, /odoo, openpanel, admin.openpanel)
- [x] Validar HTTPS financeiro / odoo / openpanel

## Desk (Spec 023)
- [x] Links conta cliente → financeiro.ligbox.com.br (`billing_store.py`)
- [ ] Card Site/CMS → campos provisionamento (fase 2 — Spec 023)
- [ ] Webhook Desk → FOSS order API (fase 3 — Spec 023)
- [ ] billing_accounts.external_id FOSS (fase 2)

## Gateway (futuro)
- [ ] Módulo pagamento FOSSBilling

## Scripts de validação
- `deploy/vm123-finance-stack/test-foss-openpanel-order.sh` — E2E order/bridge