**Purpose:** Ordered checklist for running Wave 2 and Wave 3 from a host with Proxmox/SSH/LAN access. Use after [Wave 0](FULL_PARALLEL_EXECUTION_ORDER.md#wave-0--gates--credentials-run-in-parallel-where-different-owners) and [Wave 1](WAVE1_COMPLETION_SUMMARY.md) are complete where possible.
**Execution model:** Within each wave, run tasks in parallel by host or component. Wave 3 depends on Wave 2 outputs.
---
## Wave 0 (gates — do first when creds allow)
| # | Task | Command / note |
|---|------|----------------|
| W0-1 | NPMplus RPC fix (405) | From host on LAN: `bash scripts/nginx-proxy-manager/update-npmplus-proxy-hosts-api.sh` |
| W0-3 | NPMplus backup | NPM_PASSWORD in .env; `bash scripts/verify/backup-npmplus.sh` when NPMplus is up |
**Or run W0-1 + W0-3 from LAN:** `bash scripts/run-wave0-from-lan.sh` (options: `--dry-run`, `--skip-backup`, `--skip-rpc-fix`). W0-2: run `scripts/bridge/run-send-cross-chain.sh` without `--dry-run` when ready.
**NPMplus backup cron (W1-8):** `bash scripts/maintenance/schedule-npmplus-backup-cron.sh --show` to print line; `--install` to add to crontab (e.g. daily 03:00).
---
## Wave 2 — Infra / deploy (parallel by host or component)
| ID | Task | Parallelize by | Notes |
|----|------|----------------|-------|
| W2-1 | Deploy monitoring stack (Prometheus, Grafana, Loki, Alertmanager) | By component | Use smom-dbis-138/monitoring/ configs; scripts/monitoring/ |
| W2-2 | Grafana via Cloudflare Access; alerts | After W2-1 | Configure Alertmanager routes |
