go-live readiness

Every gate between this host and a publicly-reachable https://on1.uno/. Each row probes its check live; green means done, amber means pending action on your side, red means broken. The "next step" column tells you the exact thing to do.

one-shot installer

All the staged scripts in one place. Run them in order; each is idempotent.

# 1. one-time bare-metal forwarder (binds 80/443 → Ofed VM)
sudo bash /tmp/enable-public-bridge.sh

# 2. confirm everything is up
./scripts/reboot-smoketest.sh

# 3. (optional) when going to *.on1.uno, install cloudflared
sudo bash /tmp/install-cloudflared.sh

See docs/GO-LIVE.md for the full diagnosis and alternative paths (Tailscale Funnel, Tele2 contact).