Somehow a gateway change locked me out of my OPNsense GUI. I still have the Anti-Lockout Rule enabled in the firewall so this shouldn't have been possible, but alas...
While I didn't have GUI access, I could still SSH. It turns out, OPNsense's main configuration file is /conf/config.xml.