felhom-controller

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00

upwatch: hold a seeding torrent app for one line test, then put its limit back exactly (R-1250)

2026-10-24 13:19:07 +02:00

Fix A, the page too: the restore's first verdict needs a stable 45 s after the 90 s health wait on every path, so an app that runs, crashes and restarts reads „not started yet”; the copy still waits the full 3 minutes. Red-proved. Commit only.

2026-10-25 13:06:06 +01:00

appbackup

fix(R-1187 a,b,d,f,g): .fab — links carried and restored safely, FIFOs refused, owners kept, busy and bad-path refusals, postgis + ON_ERROR_STOP

2026-10-26 20:26:02 +01:00

appexport

fix(R-1187 b): the import writes only through os.Root — never through a link that leaves the app's folder

2026-10-26 20:28:04 +01:00

assets

fix: standardize log prefixes, remove duplicates, add missing module tags

2026-02-26 21:20:09 +01:00

backup

fix(R-1218, R-1219): stage the off-site password when its file exists; no recovery ceremony during a recovery offer

2026-10-26 20:20:59 +01:00

backupwindow

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

bootrecon

controller v0.242.0: a removed app is listed with its kept backup; five small ones (R-487 R-491 R-490 R-489 R-476 R-456)

2026-09-13 22:50:18 +02:00

bootstrap

v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

2026-10-12 15:38:28 +02:00

channelhealth

R-271: the channel recovery after a controller restart is reported

2026-10-05 21:55:37 +02:00

cloudflare

fix: standardize log prefixes, remove duplicates, add missing module tags

2026-02-26 21:20:09 +01:00

config

v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

2026-10-12 15:38:28 +02:00

crashboot

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00

crypto

fix: P0+P1 critical bug fixes across controller (24 files)

2026-02-25 13:39:45 +01:00

dockerexec

D48: a restore downloads first — every restore path resolves and pulls every image of the definition that will run before the stop, under the image-work lock held until the restore returns; a failed pull refuses with the app untouched (a deleted version and a busy registry read differently), one operator line. Red-proved. Commit only.

2026-10-25 09:38:28 +01:00

family

W12 family names keep their accents, login made without them; W9 banner link colour; W10 recovery-code page one plain line; W11/W24 remote page hides provider login and key fields behind Haladó; unreleased

2026-10-21 22:35:24 +02:00

fillwatch

v0.309.0: the fill warning reaches the household in its own language; the root-filesystem disk event pinned end to end (R-521 F7)

2026-10-12 17:11:53 +02:00

holdreport

fix(R-1298): held-app reports only for installed apps (a restore hold always)

2026-10-26 20:26:44 +01:00

i18n

fix(R-1187 a,b,d,f,g): .fab — links carried and restored safely, FIFOs refused, owners kept, busy and bad-path refusals, postgis + ON_ERROR_STOP

2026-10-26 20:26:02 +01:00

infra

R-1281: FileBrowser is served on its own felhom-files network (traefik, and OnlyOffice while linked) and leaves traefik-public, so no app container reaches it. R-1126's check-then-publish gate unchanged. Red-proved. Commit only.

2026-10-25 22:26:45 +01:00

integrations

v0.331.0: OnlyOffice opens and saves from FileBrowser and Nextcloud; FileBrowser back at once after a restart (R-1018)

2026-10-18 21:05:04 +02:00

logx

v0.116.0: observability pass — always-on debug ring + leveled sweep + agent tab + self-log pull — MinAgent: 0.81.0

2026-07-11 16:45:57 +02:00

mailrelay

v0.89.0: app-email plaintext-only listener (:2526) + split-From mapping

2026-06-29 13:13:40 +02:00

mediawire

v0.314.0: a restore puts the setup gate back as it was (R-1057); a test build moves with the floor (R-1053); Prowlarr links itself (R-1058); the box claims Plex by address (R-1060)

2026-10-15 14:34:33 +02:00

metrics

v0.342.0 (unreleased): the upload and CPU watch — an app that sends or burns far more than its own numbers explain is one operator-only alarm; the line learnt from the off-site push; qBittorrent's default upload limit (never over the household's)

2026-10-23 21:26:09 +02:00

monitor

health check: the last six producers carry their dashboard sentence (R-79 option A, D3)

2026-10-08 14:49:27 +02:00

nightchain

Review fixes for 0.340.0: C5 a catch-up releases the whole-guest backup when its backup legs end (red-proved); C3 the R-1187 c refusal text fits an unhealthy app; C6 two comments; C8 README backup.volumes wording; unreleased

2026-10-22 21:25:48 +02:00

notify

v0.342.0 (unreleased): the upload and CPU watch — an app that sends or burns far more than its own numbers explain is one operator-only alarm; the line learnt from the off-site push; qBittorrent's default upload limit (never over the household's)

2026-10-23 21:26:09 +02:00

offsiteapply

v0.290.0: the clean-up guard skips same-day superseded young snapshots instead of refusing (R-824), refuses above the weekly cap; a due set-aside deletion is handed to the hub's 7-day wait (decision 74, R-823)

2026-10-04 07:27:38 +02:00

privpolicy

v0.329.0 (review): an app named like another app's appdata folder gets no root; USERDATA_PATH is always derived, never the app's env

2026-10-17 23:22:54 +02:00

quiesce

v0.335.0: no app stop for a tier the agent will refuse because its host is busy (host_busy pre-check, R-921)

2026-10-19 20:05:52 +02:00

recovery

v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

2026-10-12 15:38:28 +02:00

report

R-1182: a finished off-site abandonment closes on the hub's abandon_purge_done (hub v0.163.0 keeps other copies' packages); unreleased

2026-10-21 13:36:12 +02:00

scheduler

Operator actions in the report reply (D1, R-314/R-279/R-177, decision 185)

2026-10-08 14:49:27 +02:00

selftest

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

selfupdate

v0.314.0: a restore puts the setup gate back as it was (R-1057); a test build moves with the floor (R-1053); Prowlarr links itself (R-1058); the box claims Plex by address (R-1060)

2026-10-15 14:34:33 +02:00

settings

feat(D53): the hub learns which apps are held — app_held / app_hold_cleared, daily repeat

2026-10-26 18:23:54 +01:00

sockheal

v0.293.0: the controller heals itself after the guest's Docker socket is re-created (R-860)

2026-10-04 19:48:29 +02:00

stacks

fix(R-1220): an unreadable app.yaml counts as installed — its folders are never kept data

2026-10-26 20:13:44 +01:00

sync

v0.328.0: the catalog allow-list — the box refuses container rights a template asks for and the box does not give (R-971, D2 = A)

2026-10-17 16:34:12 +02:00

system

Media build part 1 (unreleased): real restart (R-1026), media apps on every PRESENT drive via an owned compose override (R-1023), dead-drive check from mountinfo, removal never deletes shared/:ro binds (R-1027), safety list knows userdata (R-1032), no drive question for media apps (R-1031)

2026-10-15 09:25:43 +02:00

upwatch

R-1292: qBittorrent's 50 % rule owns the NORMAL limit only (up_limit through app/preferences), never the current speed mode's slot. Test with the alternative mode on, red-proved. Commit only.

2026-10-26 13:01:31 +01:00

util

v0.314.0: a restore puts the setup gate back as it was (R-1057); a test build moves with the floor (R-1053); Prowlarr links itself (R-1058); the box claims Plex by address (R-1060)

2026-10-15 14:34:33 +02:00

web

fix(R-1218, R-1219): stage the off-site password when its file exists; no recovery ceremony during a recovery offer

2026-10-26 20:20:59 +01:00