# Staging (192.168.1.253) — Security Baseline
Established: 2026-03-01

## SSH Authorized Keys (johan)
Not captured (user-level access only)

## Expected Users (uid>=1000)
nobody:65534 (system)
johan:1000

## Expected Listening Ports
- 22 (SSH)
- 139/445 (Samba)
- 2283 (Immich)
- 8080 (generic/various)
- 8082 (inou api)
- 8096 (Jellyfin)
- 8123 (Home Assistant)
- 8765 (inou viewer)
- 9000 (various)
- 9124 (inou dbquery)
- 1080 (inou portal)
- 18789 (OpenClaw)

## SSH Hardening
- Could not verify with user-level access

## Known Firewall State
- UFW: not verified (user-level only)
- LAN-only dev/staging machine

## Known Issues at Baseline
- Many services exposed on all interfaces (LAN-only exposure, acceptable for dev)
- SSH hardening not directly verified
