R-782 — measured on bench 9401 (demo-hp), 2026-10-06 ~20:50 CEST.

## homepage v1.13.2 — RED: the template (no HOMEPAGE_ALLOWED_HOSTS), box host name
== r782-home env HOMEPAGE_ALLOWED_HOSTS=
/ Host=home.example.hu -> 500 body: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8" data-next-head=""/><meta name="viewport" content="width=devic
/api/services Host=home.example.hu -> 400 body: {"error":"Host validation failed. See logs for more details."}
/api/widgets Host=home.example.hu -> 400 body: {"error":"Host validation failed. See logs for more details."}
Host validation failed for: home.example.hu. Hint: Set the HOMEPAGE_ALLOWED_HOSTS environment variable to allow requests from this host / port.
Host validation failed for: home.example.hu. Hint: Set the HOMEPAGE_ALLOWED_HOSTS environment variable to allow requests from this host / port.
== r782-home2 env HOMEPAGE_ALLOWED_HOSTS=home.example.hu
/ Host=home.example.hu -> 500 body: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8" data-next-head=""/><meta name="viewport" content="width=devic
/api/services Host=home.example.hu -> 500 body: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8" data-next-head=""/><meta name="viewport" content="width=devic
/api/widgets Host=home.example.hu -> 500 body: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8" data-next-head=""/><meta name="viewport" content="width=devic
(the '/' 500 is the first request racing the skeleton copy — see the next run)

## homepage v1.13.2 with HOMEPAGE_ALLOWED_HOSTS=home.example.hu and a config volume (as the template)
home.example.hu / 200; home.example.hu /api/services 200; other.example.hu /api/services 400 {"error":"Host validation failed..."}

## glance v0.8.5 — the template's seeded glance.yml, a config volume
[felhom] first boot — seeding a default glance.yml
2026/10/06 18:51:42 Starting server on :8080 (base-url: "", assets-path: "")
GET / with no credentials -> 200
      4 Kezdőlap
GET /login -> 404
0
0
(GET / with no credentials 200 and the Hungarian start page; no auth: block in the seeded file (count 0); /login 404 — the dashboard is public to anyone with the address)

Teardown: every container and volume removed by name; 0 left with label felhom.r782=1.
