== taken: 2026-10-15T20:29:41Z guest 9201 (demo-hp), read-only
== docker ps (before = after: nothing installed, removed or restarted)
adventurelog ghcr.io/seanmorley15/adventurelog-backend:v0.13.0 Up 18 hours (healthy)
adventurelog-frontend ghcr.io/seanmorley15/adventurelog-frontend:v0.13.0 Up 18 hours (healthy)
adventurelog-postgres postgis/postgis:16-3.5-alpine Up 18 hours (healthy)
bentopdf ghcr.io/alam00000/bentopdf:v2.8.6 Up 18 hours (healthy)
bookstack lscr.io/linuxserver/bookstack:26.09.1 Up 18 hours (healthy)
bookstack-db mariadb:12.3 Up 18 hours (healthy)
calibre-web crocodilestick/calibre-web-automated:v4.0.8 Up 18 hours (healthy)
cloudflared cloudflare/cloudflared:2026.9.3 Up 29 hours (healthy)
docmost docmost/docmost:0.96.0 Up 18 hours (healthy)
docmost-postgres postgres:18-alpine Up 18 hours (healthy)
docmost-redis redis:7-alpine Up 18 hours (healthy)
felhom-controller gitea.dooplex.hu/admin/felhom-controller:0.317.0 Up 56 minutes (healthy)
filebrowser gtstef/filebrowser:1.5.6-stable Up 6 hours (healthy)
home-assistant ghcr.io/home-assistant/home-assistant:2026.9.4 Up 18 hours (healthy)
opengist ghcr.io/thomiceli/opengist:1.15 Up 18 hours (healthy)
paperless-postgres postgres:18-alpine Up 18 hours (healthy)
paperless-redis redis:7-alpine Up 18 hours (healthy)
paperless-webserver ghcr.io/paperless-ngx/paperless-ngx:2.20.15 Up 18 hours (healthy)
plex plexinc/pms-docker:1.41.4.9463-630c9f557 Up 12 hours (healthy)
privatebin privatebin/pdo:2.0.6 Up 18 hours (healthy)
traefik traefik:v3.7.13 Up 18 hours
== plex image
plexinc/pms-docker:1.41.4.9463-630c9f557
== plex mounts (FAQ: Plex only READS the drive)
/config rw=true
/media rw=false
/transcode rw=true
/mnt/felhom-drives/hdd_1/userdata/media rw=false

== plex env KEYS (FAQ: the box set the public address) - names only
ADVERTISE_IP
TZ
PLEX_CLAIM
== /identity (claimed flag)
claimed="1"
== controller log: media wiring lines for plex (positive observable: the box added folders / found nothing to add)

== VERDICT (read-only box check, Part A.3 under night rule 2)
- „Plex only reads the drive" (FAQ 2): PASS — /media and the per-drive media bind are rw=false.
- „The box set Plex up to answer on your own address" (FAQ 5): PASS — ADVERTISE_IP is in the container env (value not printed).
- Claimed state the guide assumes (sections 1 and 4, FAQ 6): PASS — /identity claimed="1".
- „The box adds a new drive's folders to your existing libraries and starts a scan" (section 2): NOT RE-READ TONIGHT.
  The wiring runs on a media app's start; nothing started since the controller came up at 19:33 UTC, so the log holds
  no wiring line, and an absent line is not evidence either way. Reading the libraries needs Plex's own token, which a
  read-only night check does not take. The claim rests on the media build's live proof (G2 on Tester 1: a drive wired into every app, Plex included; G7 on this box: the live catalog)
  — felhom.eu documentation/audits/media-build-2026-10-15/G and G7 — and on felhom-controller mediawire.go plex().
- Nothing installed, removed, restarted or changed (docker ps above; no POST sent).
