Operations posture
Read-onlyServer and Docker control buttons are intentionally disabled until safe backend control endpoints are defined and protected.
file://.
Use Synology Web Station or run .\preview.ps1 and open http://127.0.0.1:4173/admin/.
Server and Docker control buttons are intentionally disabled until safe backend control endpoints are defined and protected.
Interactive local calendar with weekends, free days, and appointments. Current storage is browser-local until server persistence is added.
Content map matched to the current dash.homehub.si sidebar: folders reveal sections, panels, and admin surfaces.
Eight hosts, grouped for capacity, roles, and service ownership. The previous NUC Cluster is now split into NUC 800G6, NUC 7i5BNK, and NUC Ami, with UNAS Pro added as a dedicated storage target.
Thirty service slots are seeded now. Rename, group, and attach real endpoints in data/infrastructure.json.
| Service | Host | Category | Status | Metrics | Route | Controls |
|---|
Services are grouped like the current dashboard. Click a card to open it in the dashboard panel, or use the external link when iframe embedding is blocked.
Some services may block iframe loading because of security headers.
Management modules are mapped now. Backend endpoints must be added before files, media, or OS update checks are live.
Upload/delete dashboard icons, service artwork, and video backgrounds after media storage and permission checks are added.
Edit selected config files through a strict allowlist with backups, syntax validation, and audit logging.
Check package updates per Linux host using a read-only agent before any update action is enabled.
Admin view of who visited from where. Raw IP addresses are not displayed; the fingerprint is a short hash for repeat-visitor correlation.
| Time | Country | City | Fingerprint | Browser / device |
|---|
Track public and internal domains, certificate state, and Authentik policy expectations.
Public project data is reused here so releases and admin review stay in one model.
Pre-translate public repository content into all public languages. Existing cached translations are kept and only missing or expired text is processed.
This runs against public repository summaries and changelog entries. Admin pages are excluded.
Admin access must be enforced by NPM and Authentik before this dashboard is reachable.
X-authentik-username
X-authentik-email
X-authentik-groups
Restart, stop, update, and shell actions should require server-side authorization checks, audit logs, CSRF protection, and narrow allowlists.
Keep admin on a protected subdomain such as admin.homehub.si, require Authentik 2FA, and optionally restrict by LAN/VPN or trusted groups.