Private control layer

Infrastructure dashboard

SSO identity Waiting for Authentik headers

Operations posture

Read-only

Server and Docker control buttons are intentionally disabled until safe backend control endpoints are defined and protected.

AuthenticationAuthentik SSO, mandatory 2FA
Edge proxyNginx Proxy Manager
Admin exposureRecommended LAN/VPN or Authentik policy restriction

Attention queue

Next steps

Local weather

Configured forecast
--
Home

Weather source is configurable in data/infrastructure.json.

Local time

Europe/Berlin
--:--

Loading date

Weekend markingEnabled in calendar
Free-day markingConfigured in calendar data

Calendar

Interactive local calendar with weekends, free days, and appointments. Current storage is browser-local until server persistence is added.

Calendar

Add appointment

Dashboard menu

Content map matched to the current dash.homehub.si sidebar: folders reveal sections, panels, and admin surfaces.

Servers

Eight hosts, grouped for capacity, roles, and service ownership. The previous NUC Cluster is now split into NUC 800G6, NUC 7i5BNK, and NUC Ami, with UNAS Pro added as a dedicated storage target.

Docker services

Thirty service slots are seeded now. Rename, group, and attach real endpoints in data/infrastructure.json.

Service Host Category Status Metrics Route Controls

Dashboard management

Management modules are mapped now. Backend endpoints must be added before files, media, or OS update checks are live.

Icons and video

Upload/delete dashboard icons, service artwork, and video backgrounds after media storage and permission checks are added.

File editor

Edit selected config files through a strict allowlist with backups, syntax validation, and audit logging.

Linux OS updates

Check package updates per Linux host using a read-only agent before any update action is enabled.

Visitor analytics

Admin view of who visited from where. Raw IP addresses are not displayed; the fingerprint is a short hash for repeat-visitor correlation.

Top countries

All tracked visits

Top cities

Approximate location

Recent visits

Latest 100
Time Country City Fingerprint Browser / device

NPM proxy routes

Track public and internal domains, certificate state, and Authentik policy expectations.

Software releases

Public project data is reused here so releases and admin review stay in one model.

Translation cache

Pre-translate public repository content into all public languages. Existing cached translations are kept and only missing or expired text is processed.

Cache status

Warm translations

This runs against public repository summaries and changelog entries. Admin pages are excluded.

Security boundary

Admin access must be enforced by NPM and Authentik before this dashboard is reachable.

Expected headers

X-authentik-username
X-authentik-email
X-authentik-groups

Control safety

Restart, stop, update, and shell actions should require server-side authorization checks, audit logs, CSRF protection, and narrow allowlists.

Recommended access

Keep admin on a protected subdomain such as admin.homehub.si, require Authentik 2FA, and optionally restrict by LAN/VPN or trusted groups.