admin 1d3af8edfb R-776: nextcloud sees each visitor behind the tunnel (trusted docker networks; 9202 checklist 3.6 re-measure owed) ...

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-06 08:17:49 +02:00

..

actualbudget

…

adventurelog

R-758: mem_limit is the sum of the compose limits — eight figures corrected, gate mem-limit-sum (--fast, stdlib) with decoys

2026-10-05 21:49:05 +02:00

audiobookshelf

audiobookshelf: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:52 +02:00

bentopdf

…

bookstack

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

calcom

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

calibre-web

calibre-web: the admin login name is generated at install (09 decision 61, R-752)

2026-10-01 13:19:02 +02:00

claper

R-758: mem_limit is the sum of the compose limits — eight figures corrected, gate mem-limit-sum (--fast, stdlib) with decoys

2026-10-05 21:49:05 +02:00

code-server

code-server: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:12 +02:00

crafty-controller

crafty-controller: 4.10.7 -> 4.11.0, its first ladder step, both venues proven (R-462)

2026-09-30 18:41:02 +02:00

dawarich

Dawarich: the third new app through the checklist — template, record, fixture, first ladder step 1.15.2 -> 1.15.3

2026-10-01 18:37:05 +02:00

docmost

docmost: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:51 +02:00

emby

emby: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:58 +02:00

ghost

ghost: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:53 +02:00

gitea

gitea: 1.27.0 -> 1.27.3, its first ladder step, both venues proven (R-462, R-624)

2026-09-30 17:16:56 +02:00

glance

…

gokapi

gokapi: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:11 +02:00

grafana

grafana: within-major step, both venues proven (R-462, Part F)

2026-09-30 14:26:47 +02:00

gramps-web

Sign-up locked twice (after_setup + case-insensitive blocks); wanderer closable (decision 48); ghost/HA/gramps probes; probe-measured gate; decoy fixture fix

2026-09-29 17:00:18 +02:00

grimmory

R-798: grimmory sets the API-docs switch v3.5.0 reads (API_DOCS_ENABLED=false) instead of the dead SWAGGER_ENABLED

2026-10-05 21:49:05 +02:00

home-assistant

home-assistant: 2026.9.3 -> 2026.9.4, within-major step, both venues proven (R-462)

2026-09-30 18:05:31 +02:00

homebox

Sign-up locked twice (after_setup + case-insensitive blocks); wanderer closable (decision 48); ghost/HA/gramps probes; probe-measured gate; decoy fixture fix

2026-09-29 17:00:18 +02:00

homepage

…

immich

immich: step v3.0.3 -> v3.2.2 (0b8272068aab36bf) re-proven at 768M; its definition rewritten by the writer (R-732)

2026-09-30 19:34:08 +02:00

jellyfin

…

karakeep

Karakeep: the second new app through the checklist — template, record, fixture, first ladder step 0.33.1 -> 0.33.2

2026-10-01 18:01:07 +02:00

kimai

R-776: kimai sees each visitor behind the tunnel (trusted docker networks; 9202 checklist 3.6 re-measure owed)

2026-10-06 08:17:49 +02:00

komga

komga: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:06 +02:00

mealie

mealie: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:08 +02:00

metube

Grimmory and MeTube published behind the family gate (controller >= 0.287.0, decisions 63/64), with complete records

2026-10-02 09:36:49 +02:00

n8n

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

navidrome

navidrome: within-major step, both venues proven (R-462, Part F)

2026-09-30 14:26:43 +02:00

nextcloud

R-776: nextcloud sees each visitor behind the tunnel (trusted docker networks; 9202 checklist 3.6 re-measure owed)

2026-10-06 08:17:49 +02:00

onlyoffice

…

opengist

opengist: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:09 +02:00

outline

R-758: mem_limit is the sum of the compose limits — eight figures corrected, gate mem-limit-sum (--fast, stdlib) with decoys

2026-10-05 21:49:05 +02:00

paperless-ngx

R-799 metube add body, R-761 logo name, R-391 no observations section (burn-down)

2026-10-05 16:55:06 +02:00

papra

burn-down round 2: R-593 papra field copy, R-760 vikunja healthcheck reason, R-594 English allow-list, R-605 refusal exit 3, R-781 onboarding decoy clone, R-806 scheme; stale runner test fixed

2026-10-05 19:15:02 +02:00

plant-it

plant-it: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:04 +02:00

plex

…

privatebin

…

radarr

…

radicale

Radicale: the first new app through the checklist — template, record, fixture, first ladder step 3.8.0 -> 3.8.1

2026-10-01 16:58:56 +02:00

rallly

rallly: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:05 +02:00

recipe-importer

…

romm

romm: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:57 +02:00

seerr

seerr: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:13 +02:00

sonarr

sonarr: re-test of the same tag at a new digest (decision 52, R-740)

2026-10-01 07:53:44 +02:00

sparkyfitness

sparkyfitness: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:56 +02:00

tandoor

…

termix

Sign-up locked twice (after_setup + case-insensitive blocks); wanderer closable (decision 48); ghost/HA/gramps probes; probe-measured gate; decoy fixture fix

2026-09-29 17:00:18 +02:00

uptime-kuma

uptime-kuma: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:15 +02:00

vaultwarden

…

vikunja

R-776: vikunja sees each visitor behind the tunnel (trusted docker networks; 9202 checklist 3.6 re-measure owed)

2026-10-06 08:17:49 +02:00

wanderer

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

wger

R-764: wger sends its mail through the box's relay (smtp_mapping, plaintext :2526, ENABLE_EMAIL gate; hidden app, 9202 boots owed)

2026-10-05 21:49:04 +02:00

wishlist

Sign-up locked twice (after_setup + case-insensitive blocks); wanderer closable (decision 48); ghost/HA/gramps probes; probe-measured gate; decoy fixture fix

2026-09-29 17:00:18 +02:00

zipline

R-776: zipline sees each visitor behind the tunnel (trusted docker networks; 9202 checklist 3.6 re-measure owed)

2026-10-06 08:17:49 +02:00