 Demo Ügyfél — Felhom Hub Dashboard Customers Apps Hosts System Offsite Configuration ← All Customers Demo Ügyfél Kikapcsolva a háztartás által, 2026-10-13 18:52 UTC — riasztás szünetel eddig: 2026-10-27 18:52 UTC Last report: 2h ago · Controller 0.310.0 Auto-refresh (paused) Demo Ügyfél off Kikapcsolva a háztartás által, 2026-10-13 18:52 UTC — riasztás szünetel eddig: 2026-10-27 18:52 UTC Controller 0.310.0 Last report 2h ago Containers 1/1 Overview Applications Setup Edit Backup & DR Events Notifications Host Customer Info Customer ID demo-felhom Name Demo Ügyfél Domain demo-felhom.eu Email <e-mail> Config MANAGED Config Created 235d ago Health Status: ok System Hostname demo-felhom OS Debian GNU/Linux 12 (bookworm) Kernel 7.0.14-23-pve CPU Intel(R) N100 (4 cores) CPU 8% Memory 13% Storage SSD 1% 1.6 / 245.0 GB Backup App data (local) Enabled Last DB dump — Off-site snapshots 13 Repo size 165.7 KB Last successful run 18h ago Soft quota 50 GB Containers (1/1) Name State CPU Memory opengist running 0.0% 66 MB App Telemetry (last 7 days) App Memory (current) Memory (avg 7d) Memory (peak 7d) Catalog Limit Errors Warnings Logs Immich 2455 MB 2457 MB 3022 MB 4480M 1 8 Request log tail Cal.com 837 MB 905 MB 941 MB 1792M 63 21 Request log tail Tandoor Recipes 868 MB 859 MB 869 MB 1280M 96 14 Request log tail RomM 742 MB 679 MB 743 MB 1280M 0 6 Request log tail Paperless-ngx 589 MB 624 MB 688 MB 1664M 2 2 Request log tail Grimmory 459 MB 502 MB 627 MB 1408M 0 84 Request log tail Dawarich 592 MB 483 MB 599 MB 2688M 12 30 Request log tail Karakeep 359 MB 462 MB 599 MB 2816M 28 7 Request log tail Docmost 471 MB 410 MB 481 MB 896M 0 24 Request log tail Komga 443 MB 367 MB 443 MB 768M 0 4 Request log tail AdventureLog 400 MB 356 MB 401 MB 896M 10 10 Request log tail SparkyFitness 305 MB 346 MB 405 MB 1792M 3 6 Request log tail Nextcloud 333 MB 330 MB 334 MB 1664M 0 4 Request log tail OnlyOffice 364 MB 323 MB 428 MB 2048M 4 48 Request log tail Home Assistant 303 MB 321 MB 353 MB 1024M 0 5 Request log tail Rallly 366 MB 310 MB 366 MB 1024M 0 8 Request log tail Gramps Web 326 MB 283 MB 336 MB 1024M 12 16 Request log tail Papra 264 MB 265 MB 295 MB 768M 0 1 Request log tail Outline 283 MB 259 MB 337 MB 1152M 20 70 Request log tail n8n 326 MB 251 MB 351 MB 1536M 147 12 Request log tail Jellyfin 189 MB 205 MB 365 MB 2048M 0 0 Request log tail Mealie 228 MB 197 MB 228 MB 1000M 8 8 Request log tail Kimai 171 MB 188 MB 219 MB 640M 0 16 Request log tail Claper 248 MB 185 MB 248 MB 640M 0 15 Request log tail Calibre-Web Automated 168 MB 170 MB 201 MB 768M 2 5 Request log tail Zipline 199 MB 168 MB 218 MB 768M 0 4 Request log tail Plex 232 MB 155 MB 234 MB 2048M 6 0 Request log tail Grafana 215 MB 155 MB 254 MB 512M 0 45 Request log tail BookStack 162 MB 141 MB 164 MB 768M 6 30 Request log tail Jellyseerr 168 MB 141 MB 168 MB 384M 0 0 Request log tail Ghost 151 MB 130 MB 158 MB 512M 10 10 Request log tail Wishlist 120 MB 120 MB 169 MB 512M 0 4 Request log tail Emby 139 MB 114 MB 145 MB 2048M 0 0 Request log tail Wanderer 147 MB 103 MB 151 MB 1024M 0 3 Request log tail Uptime Kuma 117 MB 100 MB 117 MB 256M 0 0 Request log tail Termix 101 MB 87 MB 115 MB 128M 0 0 Request log tail Homepage 82 MB 83 MB 84 MB 256M 0 0 Request log tail Radarr 95 MB 78 MB 95 MB 512M 0 0 Request log tail Crafty Controller 78 MB 78 MB 78 MB 2048M 0 0 Request log tail Sonarr 79 MB 75 MB 79 MB 512M 0 1 Request log tail SABnzbd 68 MB 68 MB 68 MB 1024M 0 0 Request log tail Felhom Controller 36 MB 66 MB 156 MB — 281 83 Request log tail MeTube 62 MB 62 MB 62 MB 768M 0 0 Request log tail Code-Server 60 MB 59 MB 60 MB 1024M 0 0 Request log tail Gitea 73 MB 59 MB 89 MB 512M 0 0 Request log tail Recipe Importer 63 MB 54 MB 63 MB 128M 0 0 Request log tail LubeLogger 61 MB 44 MB 61 MB 512M 0 3 Request log tail OpenGist 66 MB 43 MB 73 MB 128M 0 0 Request log tail Audiobookshelf 48 MB 40 MB 52 MB 512M 0 0 Request log tail ActualBudget 44 MB 32 MB 46 MB 256M 0 0 Request log tail Grocy 30 MB 26 MB 30 MB 384M 0 0 Request log tail Radicale 27 MB 23 MB 27 MB 128M 0 4 Request log tail qBittorrent 22 MB 21 MB 22 MB 1024M 0 0 Request log tail Vaultwarden 21 MB 20 MB 21 MB 256M 0 0 Request log tail Vikunja 20 MB 20 MB 20 MB 256M 0 2 Request log tail PrivateBin 24 MB 18 MB 24 MB 128M 0 0 Request log tail Navidrome 13 MB 16 MB 19 MB 256M 0 6 Request log tail Homebox 17 MB 14 MB 20 MB 256M 0 0 Request log tail Glance 6 MB 6 MB 6 MB 128M 0 0 Request log tail NZBGet 5 MB 5 MB 6 MB 512M 2 0 Request log tail Gokapi 7 MB 5 MB 7 MB 128M 0 10 Request log tail BentoPDF 5 MB 4 MB 5 MB 384M 0 0 Request log tail Transmission 6 MB 4 MB 6 MB 512M 0 0 Request log tail App Log Tails (on-demand, last 2 per app kept) App Collected Received Lines felhom-controller 2026-07-10 14:52:34 (95d ago) 95d ago 200 View Download .log Credentials Retrieval Password •••••••••••••••• Reveal ⎘ The per-customer secret that fetches the whole config — masked by default; never place it on a command line (the installer reads it at a no-echo prompt). Hand this phrase to the customer now — in person or by phone. The customer knows it as „Tulajdonosi jelmondat”; it is never e-mailed, and the self-bind page asks for it (R-497). Regenerate API Key 4b11c0c3ca33797783946897ce59ab37f7cccf231c801085ca057b23d69cd51b ⎘ Used by the controller for ongoing hub communication (reports, notifications, backups) Dashboard access — customer claim Claim status Claimed 87d ago generation 2 · issued 71d ago Box: claimed box report 2h ago The customer sets + owns the dashboard password (claim code → own password). The code goes ONLY to the registered address (<e-mail>); the hub stores a hash — no plaintext code exists to display. Beállító kód küldése Customer self-bind (R-27) Let the customer bind their own freshly-installed appliance — no operator bind needed. Sends a 7-day capability link to the registered address (<e-mail>); the customer opens it and enters the box's console pairing code + their retrieval passphrase . Wrong entries lock the link after 5 attempts. If the link expires, bind the appliance manually from the Hosts page. Send self-bind link Kapcsolódó link még nem ment ki. It is sent automatically when the customer is created or RESET, when an e-mail is set on a customer with no box, and when this customer's host is deleted. Setup Command Day-0 host bootstrap. The command always fetches the current felhom-host-install.sh from felhom.eu — there is no version to pick here. Run it on a freshly-PVE-installed Proxmox host as root (create the customer in the hub first). It enrolls the host, installs + verifies the agent, and provisions the guest; the in-guest controller then pulls its own controller.yaml . The retrieval passphrase is entered at the no-echo prompt — never on the command line. Mode * appliance (Felhom-owned box) byo (a host you do not own) Cores * byo: required — a conservative slice of the host Memory (MiB) * byo: required — MiB (32 GB → 32768) VMID (optional) pick from pct list + qm list ; blank = default/auto Node (optional) required only on a multi-node cluster ACL storages (optional) grant the token write access on exactly these storages Operator pubkey file (optional) arm self-update from day-0 Preserve state from (optional) reinstall keeping the leaf pin stable --dry-run print, don't execute --preflight-only checks + verdict, no install --skip-provision agent only, no guest --allow-new-leaf Option 1: Online install (recommended) Download-then-run (not curl | sudo bash ) so you can inspect the script first — the right default for a sovereignty product. The passphrase is entered at the no-echo prompt. curl -fsSL https://felhom.eu/scripts/felhom-host-install.sh -o felhom-host-install.sh \ && sudo bash felhom-host-install.sh --customer-id demo-felhom --mode <appliance|byo> ⎘ Option 2: Local install (script already on host) sudo ./felhom-host-install.sh --customer-id demo-felhom --mode <appliance|byo> ⎘ Option 3: Manual config fetch (debug only) The same payload the controller pulls itself — for inspection, not normal provisioning. Replace the placeholder with the Retrieval Password above (Reveal to see it) — it is intentionally NOT baked into this command. curl -fsSL https://hub.felhom.eu/api/v1/config/demo-felhom -H "X-Retrieval-Password: <YOUR-RETRIEVAL-PASSWORD>" -o controller.yaml ⎘ YAML Preview Loading preview... Customer Identity Customer ID * Display Name * Domain * Email Customer e-mail language Magyar English A DEFAULT, not a setting. It is the language of the claim e-mail and the bind page, and the language the box starts in. The moment the household picks one on their own dashboard, theirs wins. Infrastructure Cloudflare Tunnel Token Cloudflare API Token Szükséges jogosultságok: Zone DNS:Edit (ACME), Zone WAF:Edit (geo-korlátozás) Git Sync Opcionális — csak privát alkalmazás-katalógushoz. A verziófrissítés enélkül is működik. Git Username Git Token Hibakeresési mód (fejlesztői) Debug mód — bőbeszédű napló + /debug menü a vezérlőn Bekapcsolva a vezérlő újraindul a következő ciklusban; a menü: https://felhom.<domain>/debug. Tesztelés után kapcsold ki. Offsite backup Enable offsite (provisions a Hetzner Storage Box on save) Type Shared (sub-account on the pool box) Dedicated (own box) Soft-quota GB (shared) Box type (dedicated) bx11 (1 TB) bx21 (5 TB) bx31 (10 TB) Provisioned: <e-mail>:/home/felhom-repo (the transient password is never shown here). applied offsite active on the box (last report 1.7 h ago) Re-issue offsite credentials Freeze offsite (read-only) Unfreeze offsite DR tier (PBS, ep0) DR tier — offsite disaster-recovery via PBS (the DEFAULT for new customers; disabling is the exception and removes the Felhom-side cost entirely) One flag, ordered rollout: the ep0 namespace + token provision automatically once the host's WG tunnel peer registers; the host agent applies the storage entry on its next tick. Offsite app backup requires this tier (the escrow ceremony depends on the PBS key). PVE storage id The storage-entry id the agent creates on the box. Default felhom-pbs; the demo host's adopted manual entry is felhom-offsite. done host enrolled (demo-felhom-8363b5) done WG tunnel peer registered done descriptor provisioned (namespace demo-felhom, token felhom@pbs!demo-felhom) done key escrow present (ceremony done) Re-issue PBS credentials Save Changes Cancel Saving… offsite provisioning can take up to a minute — please do not click again. Controller Update Controller version 0.310.0 Registry latest v0.310.0 — up to date Controller URL https://felhom.demo-felhom.eu Effective floor (min. version) v0.309.0 — at/above floor Global floor v0.292.0 Per-customer override Save floor Boxes below the effective floor auto-update on their next report. Blank clears the override. Controller updates are agent-driven (the version floor above) and config is delivered by the box pulling it on a config change — the hub never connects into the box. Edit the config in the form above; the controller re-pulls and restarts on its next report. Geo-korlátozás Állapot Inaktív Ügyfél-visszaállítás (RESET — pre-első-telepítés) Egyetlen művelettel visszaállítja az ügyfelet az első telepítés előtti állapotba: minden működési állapot törlődik (offsite tároló, PBS névtér, DR-recept, egyszeri jelszó, azonosítási állapot). Az azonosság és az alapkonfiguráció megmarad (ügyfélrekord, előzmények, események). Ez NEM törli a hostokat — ha még van host, előbb azt kell törölni. Kevesebb, mint a Danger zone Delete: az ügyfél megmarad, csak a működési nyomok tűnnek el. Ügyfél visszaállítása… … Megőrzött helyreállítási-kulcs letét megsemmisítése — külön megerősítés (ez visszafordíthatatlanul törli a megőrzött escrow blobokat). Írd be az ügyfél azonosítóját a megerősítéshez: Megerősítés & visszaállítás Mégse Danger zone Blocking hides the customer from the Dashboard (reports are still accepted). Delete customer is the full offboarding teardown (v0.69.0): it deletes the host(s), then RESETs the customer (offsite repository destroyed, PBS credentials revoked — Cloudflare is not touched : the tunnel and DNS records are removed by hand, and the dialog lists them), then purges the customer record and all escrow ciphertext — including the retained recovery-key custody for this customer's hosts. This is the one true purge point; host deletion only demotes custody, never destroys it. Three acknowledgements and the typed customer-id are required. For identity-preserving re-onboarding use Ügyfél-visszaállítás (RESET) above instead. Block Delete customer… … 1. The host(s) will be deleted — recovery-key custody is demoted to retained custody, not destroyed. 2. The customer will be RESET — the offsite repository is DESTROYED and PBS credentials are revoked. Cloudflare is not touched — I remove the items listed above by hand. 3. The customer record and ALL escrow ciphertext are PURGED — unrecoverable. Type the customer-id to confirm: Confirm & delete everything Cancel DR Recipe (secret-free reconstruction plan) The non-secret re-provision plan — guest sizing, drive inventory (durable-id → role → mount → intent), PVE storage defs, PBS coordinates, and app inventory + storage bindings. It complements escrow (keys) and PBS/restic (bytes): it contains no key, password, or token . Use it to rebuild the host/guest/storage scaffolding before the PBS bytes land. Storage / guest / PBS half (agent) present Customer / apps half (controller) present Last updated 2026-10-13T18:52:37Z Download recipe (JSON) Events 1 warning (last 24h) All Errors Warnings Info Time Severity Type Message Source Oct 13 18:52 info host_deliberate_off Switched off by the household at 2026-10-13 18:52 UTC — silence alarms held for 14 days hub Oct 13 18:39 info controller_started Controller elindult (0.310.0) controller Oct 13 17:06 info controller_started Controller elindult (0.309.0) controller Oct 13 16:41 info app_removed Alkalmazás eltávolítva: immich controller Oct 13 16:32 info app_deployed Alkalmazás telepítve: Immich controller Oct 13 16:30 info app_deploy_started Alkalmazás telepítése elindult: Immich controller Oct 13 13:58 warning host_crash_restart demo-felhom-8363b5 restarted by itself after an unexpected stop (a kernel crash, a power cut or a hard reset) at 2026-10-13T13:42:24Z — 1 such restart(s) in 24 h. kernel.panic now 10. hub Oct 13 13:58 info host_restarted_after_crash Your box restarted by itself after an unexpected stop. You do not need to do anything. hub Oct 13 13:44 info controller_started Controller elindult (0.309.0) controller Oct 13 11:09 info app_removed Alkalmazás eltávolítva: sabnzbd controller Oct 13 11:08 info app_removed Alkalmazás eltávolítva: nzbget controller Oct 13 11:07 info app_removed Alkalmazás eltávolítva: transmission controller Oct 13 11:06 info app_removed Alkalmazás eltávolítva: qbittorrent controller Oct 13 11:06 info app_removed Alkalmazás eltávolítva: seerr controller Oct 13 11:05 info app_removed Alkalmazás eltávolítva: sonarr controller Oct 13 11:04 info app_removed Alkalmazás eltávolítva: radarr controller Oct 13 10:48 info app_deployed Alkalmazás telepítve: SABnzbd controller Oct 13 10:48 info app_deploy_started Alkalmazás telepítése elindult: SABnzbd controller Oct 13 10:48 info app_deployed Alkalmazás telepítve: NZBGet controller Oct 13 10:48 info app_deploy_started Alkalmazás telepítése elindult: NZBGet controller Oct 13 10:48 info app_deployed Alkalmazás telepítve: Transmission controller Oct 13 10:47 info app_deploy_started Alkalmazás telepítése elindult: Transmission controller Oct 13 10:47 info app_deployed Alkalmazás telepítve: qBittorrent controller Oct 13 10:47 info app_deploy_started Alkalmazás telepítése elindult: qBittorrent controller Oct 13 10:47 info app_deployed Alkalmazás telepítve: Jellyseerr controller Oct 13 10:46 info app_deploy_started Alkalmazás telepítése elindult: Jellyseerr controller Oct 13 10:46 info app_deployed Alkalmazás telepítve: Sonarr controller Oct 13 10:46 info app_deploy_started Alkalmazás telepítése elindult: Sonarr controller Oct 13 10:46 info app_deployed Alkalmazás telepítve: Radarr controller Oct 13 10:45 info app_deploy_started Alkalmazás telepítése elindult: Radarr controller Oct 13 10:45 info app_removed Alkalmazás eltávolítva: crafty-controller controller Oct 13 10:44 info app_removed Alkalmazás eltávolítva: audiobookshelf controller Oct 13 10:44 info app_removed Alkalmazás eltávolítva: navidrome controller Oct 13 10:43 info app_removed Alkalmazás eltávolítva: komga controller Oct 13 10:42 info app_removed Alkalmazás eltávolítva: emby controller Oct 13 10:42 info app_removed Alkalmazás eltávolítva: plex controller Oct 13 10:25 info app_deployed Alkalmazás telepítve: Crafty Controller controller Oct 13 10:25 info app_deploy_started Alkalmazás telepítése elindult: Crafty Controller controller Oct 13 10:25 info app_deployed Alkalmazás telepítve: Audiobookshelf controller Oct 13 10:24 info app_deploy_started Alkalmazás telepítése elindult: Audiobookshelf controller Oct 13 10:24 info app_deployed Alkalmazás telepítve: Navidrome controller Oct 13 10:24 info app_deploy_started Alkalmazás telepítése elindult: Navidrome controller Oct 13 10:24 info app_deployed Alkalmazás telepítve: Komga controller Oct 13 10:23 info app_deploy_started Alkalmazás telepítése elindult: Komga controller Oct 13 10:23 info app_deployed Alkalmazás telepítve: Emby controller Oct 13 10:23 info app_deploy_started Alkalmazás telepítése elindult: Emby controller Oct 13 10:22 info app_deployed Alkalmazás telepítve: Plex controller Oct 13 10:22 info app_deploy_started Alkalmazás telepítése elindult: Plex controller Oct 13 10:22 info app_removed Alkalmazás eltávolítva: code-server controller Oct 13 10:21 info app_removed Alkalmazás eltávolítva: recipe-importer controller Report History (last 24h) 205 reports Time Status CPU Memory Oct 13 18:39 ok 8% 13% Oct 13 18:36 ok 22% 14% Oct 13 18:32 ok 24% 14% Oct 13 18:21 ok 22% 14% Oct 13 18:06 ok 22% 14% Oct 13 17:51 ok 21% 14% Oct 13 17:36 ok 22% 14% Oct 13 17:21 ok 13% 14% Oct 13 17:06 ok 11% 14% Oct 13 16:41 ok 4% 14% Oct 13 16:30 ok 18% 14% Oct 13 16:29 ok 13% 14% Oct 13 16:14 ok 14% 14% Oct 13 15:59 ok 13% 14% Oct 13 15:44 ok 13% 14% Oct 13 15:29 ok 13% 14% Oct 13 15:14 ok 13% 14% Oct 13 14:59 ok 13% 14% Oct 13 14:44 ok 13% 14% Oct 13 14:29 ok 13% 14% Oct 13 14:14 ok 13% 14% Oct 13 13:59 ok 4% 13% Oct 13 13:44 ok 13% 13% Oct 13 13:22 ok 0% 14% Oct 13 13:07 ok 0% 14% Oct 13 12:52 ok 1% 14% Oct 13 12:37 ok 1% 14% Oct 13 12:22 ok 0% 14% Oct 13 12:07 ok 2% 14% Oct 13 11:52 ok 1% 14% Oct 13 11:37 ok 2% 14% Oct 13 11:22 ok 1% 14% Oct 13 11:09 ok 1% 15% Oct 13 11:08 ok 5% 15% Oct 13 11:07 ok 10% 16% Oct 13 11:07 ok 3% 15% Oct 13 11:06 ok 3% 15% Oct 13 11:06 ok 2% 15% Oct 13 11:05 ok 19% 17% Oct 13 11:04 ok 4% 17% Oct 13 10:52 ok 3% 17% Oct 13 10:48 ok 11% 18% Oct 13 10:48 ok 16% 18% Oct 13 10:48 ok 10% 18% Oct 13 10:47 ok 5% 18% Oct 13 10:46 ok 18% 17% Oct 13 10:46 ok 4% 16% Oct 13 10:45 ok 26% 16% Oct 13 10:45 ok 5% 16% Oct 13 10:45 ok 3% 15% Oct 13 10:44 ok 5% 15% Oct 13 10:43 ok 1% 16% Oct 13 10:43 ok 2% 18% Oct 13 10:42 ok 6% 19% Oct 13 10:37 ok 2% 21% Oct 13 10:25 ok 13% 21% Oct 13 10:24 ok 5% 21% Oct 13 10:24 ok 17% 21% Oct 13 10:23 ok 4% 18% Oct 13 10:23 ok 16% 17% Oct 13 10:22 ok 25% 16% Oct 13 10:22 ok 25% 16% Oct 13 10:22 ok 1% 15% Oct 13 10:21 ok 6% 15% Oct 13 10:21 ok 6% 15% Oct 13 10:20 ok 7% 17% Oct 13 10:19 ok 5% 19% Oct 13 10:19 ok 3% 20% Oct 13 10:18 ok 5% 22% Oct 13 10:07 ok 3% 23% Oct 13 10:01 ok 15% 23% Oct 13 10:01 ok 8% 23% Oct 13 10:00 ok 39% 22% Oct 13 09:58 ok 39% 22% Oct 13 09:57 ok 36% 25% Oct 13 09:55 warn 91% 20% Oct 13 09:54 ok 25% 17% Oct 13 09:54 ok 1% 15% Oct 13 09:53 ok 4% 15% Oct 13 09:53 ok 6% 15% Oct 13 09:52 ok 3% 16% Oct 13 09:52 ok 4% 17% Oct 13 09:51 ok 9% 20% Oct 13 09:50 ok 10% 22% Oct 13 09:37 ok 4% 25% Oct 13 09:34 ok 9% 25% Oct 13 09:33 ok 22% 25% Oct 13 09:33 ok 5% 25% Oct 13 09:32 ok 18% 22% Oct 13 09:31 ok 54% 20% Oct 13 09:29 ok 20% 16% Oct 13 09:29 ok 1% 16% Oct 13 09:28 ok 12% 16% Oct 13 09:28 ok 11% 18% Oct 13 09:27 ok 2% 19% Oct 13 09:26 ok 2% 22% Oct 13 09:25 ok 7% 24% Oct 13 09:25 ok 6% 26% Oct 13 09:22 ok 4% 29% Oct 13 09:08 ok 44% 28% Oct 13 09:07 ok 18% 27% Oct 13 09:07 ok 18% 27% Oct 13 09:06 ok 26% 26% Oct 13 09:05 ok 26% 25% Oct 13 09:03 ok 8% 22% Oct 13 09:02 ok 20% 19% Oct 13 09:00 ok 24% 18% Oct 13 09:00 ok 3% 15% Oct 13 08:59 ok 25% 17% Oct 13 08:58 ok 2% 16% Oct 13 08:58 ok 1% 17% Oct 13 08:57 ok 2% 18% Oct 13 08:56 ok 3% 19% Oct 13 08:56 ok 2% 19% Oct 13 08:52 ok 2% 25% Oct 13 08:40 ok 17% 25% Oct 13 08:39 ok 11% 25% Oct 13 08:39 ok 16% 26% Oct 13 08:38 ok 15% 25% Oct 13 08:37 ok 44% 24% Oct 13 08:37 ok 39% 23% Oct 13 08:36 ok 16% 22% Oct 13 08:35 ok 26% 17% Oct 13 08:35 ok 1% 16% Oct 13 08:34 ok 1% 16% Oct 13 08:33 ok 3% 17% Oct 13 08:33 ok 9% 18% Oct 13 08:32 ok 6% 18% Oct 13 08:31 ok 3% 18% Oct 13 08:31 ok 1% 19% Oct 13 08:22 ok 2% 21% Oct 13 08:14 ok 18% 22% Oct 13 08:13 ok 14% 21% Oct 13 08:13 ok 40% 21% Oct 13 08:13 ok 12% 20% Oct 13 08:12 ok 27% 19% Oct 13 08:11 ok 16% 21% Oct 13 08:10 ok 30% 17% Oct 13 08:09 ok 3% 15% Oct 13 08:09 ok 1% 15% Oct 13 08:08 ok 1% 17% Oct 13 08:07 ok 12% 16% Oct 13 08:07 ok 2% 16% Oct 13 08:07 ok 1% 16% Oct 13 08:06 ok 28% 17% Oct 13 08:05 ok 15% 17% Oct 13 07:52 ok 2% 21% Oct 13 07:49 ok 38% 22% Oct 13 07:49 ok 13% 22% Oct 13 07:48 ok 20% 22% Oct 13 07:48 ok 37% 22% Oct 13 07:48 ok 13% 22% Oct 13 07:47 ok 26% 23% Oct 13 07:45 ok 28% 18% Oct 13 07:45 ok 1% 16% Oct 13 07:37 ok 2% 20% Oct 13 07:28 ok 22% 17% Oct 13 07:27 ok 1% 16% Oct 13 07:22 ok 1% 16% Oct 13 07:09 ok 29% 16% Oct 13 07:09 ok 5% 15% Oct 13 07:07 ok 1% 17% Oct 13 06:52 ok 36% 16% Oct 13 06:52 ok 25% 17% Oct 13 06:51 ok 11% 15% Oct 13 06:37 ok 1% 16% Oct 13 06:34 ok 39% 17% Oct 13 06:34 ok 2% 15% Oct 13 06:22 ok 3% 18% Oct 13 06:11 ok 25% 15% Oct 13 06:10 ok 9% 14% Oct 13 06:07 ok 1% 15% Oct 13 05:53 ok 26% 16% Oct 13 05:53 ok 1% 15% Oct 13 05:52 ok 1% 14% Oct 13 05:37 ok 2% 29% Oct 13 05:28 ok 25% 17% Oct 13 05:22 ok 1% 16% Oct 13 05:07 ok 1% 15% Oct 13 04:52 ok 1% 15% Oct 13 04:37 ok 2% 15% Oct 13 04:22 ok 1% 15% Oct 13 04:07 ok 1% 15% Oct 13 03:52 ok 1% 15% Oct 13 03:37 ok 2% 15% Oct 13 03:22 ok 2% 15% Oct 13 03:07 ok 2% 15% Oct 13 02:52 ok 1% 15% Oct 13 02:37 ok 1% 15% Oct 13 02:22 ok 1% 15% Oct 13 02:07 ok 0% 16% Oct 13 01:52 ok 3% 15% Oct 13 01:37 ok 1% 15% Oct 13 01:22 ok 1% 15% Oct 13 01:07 ok 1% 15% Oct 13 00:52 ok 0% 15% Oct 13 00:37 ok 1% 15% Oct 13 00:22 ok 1% 16% Oct 13 00:07 ok 1% 16% Oct 12 23:52 ok 1% 15% Oct 12 23:37 ok 0% 16% Oct 12 23:22 ok 0% 15% Oct 12 23:07 ok 1% 15% Oct 12 22:52 ok 0% 16% Oct 12 22:37 ok 0% 16% Notifications Email <e-mail> Events backup_failed, db_dump_failed, offbox_enlarge_blocked, storage_disconnected, node_down, health_critical, disk_warning, disk_critical, expected_backup_missed, expected_dbdump_missed, app_update_undone, app_update_held, app_stopped_unhealthy Recent (last 10) Time Channel Event Status Message Oct 13 13:58 operator host_crash_restart sent demo-felhom-8363b5 restarted by itself after an unexpected stop (a kernel crash, a power cut or a hard reset) at 2026-10-13T13:42:24Z — 1 such restart(s) in 24 h. kernel.panic now 10. Oct 13 13:58 customer host_crash_restart skipped demo-felhom-8363b5 restarted by itself after an unexpected stop (a kernel crash, a power cut or a hard reset) at 2026-10-13T13:42:24Z — 1 such restart(s) in 24 h. kernel.panic now 10. Oct 09 07:00 customer kernel_notice sent [Felhom] Ma éjjel újraindul a Felhom dobozod Oct 09 03:00 operator expected_backup_missed sent No fresh verified backup: host tier: newest backup is 48h0m0s old (limit 26h0m0s) Oct 09 03:00 customer expected_backup_missed sent No fresh verified backup: host tier: newest backup is 48h0m0s old (limit 26h0m0s) Oct 08 07:00 customer kernel_notice sent [Felhom] Ma éjjel újraindul a Felhom dobozod Oct 07 16:12 customer kernel_notice sent [Felhom] Ma éjjel újraindul a Felhom dobozod Oct 07 11:45 operator agent_capability_degraded sent Host demo-felhom-8363b5: agent privileged capability degraded — controllerswap-write (impairs: controller-swap / managed auto-update) Oct 05 10:39 operator agent_capability_degraded sent Host demo-felhom-8363b5: agent privileged capability degraded — wg-conf-install (impairs: wg-felhom conf install (root content check, R-861)) Oct 05 02:15 operator offsite_prune_guard_refused sent Off-site clean-up window 3: the box's fake-snapshot guard refused to prune — nothing was deleted: the policy would remove snapshot 343d57a5 from 2026-09-28T02:15:05Z — younger than 8 days and not superseded the same day, which honest retention never does Open host page: demo-felhom-8363b5 → demo-felhom-8363b5 KIKAPCSOLVA Host ID demo-felhom-8363b5 Customer Demo Ügyfél Agent Version 0.155.0 Enrolled 87d ago Last Report 2h ago Power Kikapcsolva a háztartás által, 2026-10-13 18:52 UTC — riasztás szünetel eddig: 2026-10-27 18:52 UTC Box connection last connected 2026-10-13 18:55 UTC (1h ago) Desired Generation 21 Vitals CPU 0% Memory 14% Disk (root fs) 33% Cloudflared running (connected) Guests 1/2 running Guests VMID Name Status Controller Last Seen 9201 demo-felhom running — 2h ago 990000 CT990000 stopped — 71d ago Storage Targets Name Role Type State Fill Thin Pool SMART Temp Wear felhom-backup — local-dir attached 1% — PASSED 34°C — felhom-pbs — pbs attached 0% — UNKNOWN — — local — local attached 33% — PASSED 34°C — local-lvm — lvmthin attached 15% 15% UNKNOWN — — Capabilities Capability Status Feature / reason controllerswap-image-inspect critical ok controller-swap / managed auto-update controllerswap-inspect critical ok controller-swap / managed auto-update controllerswap-read critical ok controller-swap / managed auto-update controllerswap-restart critical ok controller-swap / managed auto-update controllerswap-write critical ok controller-swap / managed auto-update disk-blkid critical ok disk data-bearing classify (format gate) disk-lsblk critical ok disk topology read (format gate) disk-lvs ok thin-pool usage read disk-mkfs-ext4 critical ok guarded format (ext4) disk-mkfs-xfs ok guarded format (xfs) disk-smart ok disk SMART health read dnsmasq-enable ok dnsmasq enable dnsmasq-guest-domain ok guest domain discovery dnsmasq-guest-ip ok guest LAN IP discovery dnsmasq-install ok dnsmasq package install dnsmasq-reload ok dnsmasq reload dnsmasq-restart ok dnsmasq restart (LAN-DNS self-heal) dnsmasq-rm ok dnsmasq drop-in remove (decommission) dnsmasq-write ok dnsmasq drop-in write (root content check, R-861) drive-bind critical ok drive attach (felhom-data bind under parent) drive-umount critical ok drive detach (fail-closed unmount) drives-chown-data ok felhom-data guest-root chown drives-mkdir-data ok felhom-data namespace create drives-mkdir-parent ok stable parent dir create drives-mkdir-sub ok per-drive stable dir create escrow-ceremony critical ok customer recovery-code ceremony (controller-driven) guest-fstrim ok weekly guest disk trim (thin-pool reclaim, R-444) guest-init-pid critical ok drive-gate guest-sees check (multi-drive concurrency) guest-reboot ok enroll activate-binds reboot guest-shutdown ok household power-off: guest shutdown (R-998) guesthook-delete-mp ok dead mountpoint slot delete (C1 net) guesthook-register ok pre-start hook register guestnet-dhclient-probe ok guest DHCP-client liveness probe guestnet-heal ok guest DHCP-client restart (the 2026-07-20 heal) guestnet-ifaces ok guest interface-mode read guestnet-route ok guest default-route probe host-poweroff ok household power-off: host power-off (R-998) mount-daemon-reload ok systemd reload after unit write mount-unit-disable ok mount unit disable mount-unit-enable ok mount unit enable mount-unit-install ok fs-UUID mount unit install (root content check, R-861) mount-unit-stop ok mount unit stop netmount-reset-failed ok NAS automount re-arm after start-limit (F10) netmount-rmdir ok removed-share mountpoint cleanup (F1) osapply-run ok OS update wrapper (guest fast lane) parent-bind-mp8 ok parent bind into guest at provision parent-make-private critical ok intermediary shared-parent peer-group isolation parent-make-shared critical ok intermediary shared-parent propagation parent-self-bind critical ok intermediary shared-parent self-bind parent-unit-enable ok shared-parent boot-persistence enable pbsdr-create ok PBS DR storage-entry create (K autogen) pbsdr-grant ok PBS DR storage ACL self-grant pbsdr-read ok PBS DR credential read (verify-loop auth probe) pbsdr-reconcile ok PBS DR storage-entry reconcile (set-only) provision-chown ok bootstrap mount guest-root chown provision-config-mount ok bootstrap config bind mount provision-onboot ok customer guest autostart (onboot) pve:pool-read ok stale-lock recovery scoping (pool ownership check) pve:store-grant:felhom-backup critical ok backup tier felhom-backup readable by the agent (archive listing, restore-test candidacy) pve:store-grant:felhom-pbs critical ok backup tier felhom-pbs readable by the agent (archive listing, restore-test candidacy) selfheal-networking-start ok appliance networking recovery at boot (F12 defense in depth) selfupdate-commit ok agent self-update commit selfupdate-rollback ok agent self-update rollback stalelock-unlock critical ok reboot-during-backup stale-lock recovery wg-conf-install critical ok wg-felhom conf install (root content check, R-861) wg-disable ok wg-quick@wg-felhom disable (revocation) wg-enable critical ok wg-quick@wg-felhom enable wg-handshake-read critical ok tunnel handshake-age read wg-restart critical ok wg-quick@wg-felhom restart (conf change) wg-tools-install ok wireguard-tools package install Diagnostics — Log Bundles Pull-based: the box ships its debug ring on its own next cycle — controller ≤ one report interval (~15 min), agent ≈ one heartbeat. The pull is recorded in the box's own log (customer-visible). Bundles expire after 72 h. Request controller logs Request agent logs No log bundles. Use the request buttons above — the box delivers on its next cycle. Operator Actions The box acts on its next report reply (usually seconds, at most one report interval) and answers on the report after that. Each press runs once. Recorded in the box's own log and in Events. Unanswered after a day: expired. Run off-site backup now disk-health-check fill-watch offsite-integrity offsite-proof Run check now Stop deletion countdown Extend countdown (days from now) No operator actions for this box yet. Network WireGuard 10.77.0.2 confirmed Interface Address tailscale0 100.70.170.35/32 tailscale0 fd7a:115c:a1e0::5236:aa24/128 vmbr0 192.168.0.162/24 Every routable address the box holds, as the kernel sees it. Loopback and link-local are excluded — including the 169.254.253.1 local-API island, which is identical on every box. The PVE web console is at https://<the LAN address>:8006 . Guest network healthy Guest State Address Route dhclient Repairs (1h) 9201 healthy 192.168.0.149 (dhcp) yes yes 0 Last swept 2026-10-13T18:52:31Z. One row per owned running guest the watchdog has probed. DR / Backup DR Recipe present Key Escrow present · 3 superseded escrow blob(s) retained Last full check (off-site) OK, depth 100%, 2026-10-11 04:00 UTC Console access User root@pam Password set 87d ago •••••••••••••••• Reveal Copy Break-glass credential for the PVE web console at https://<host-ip>:8006 (realm: Linux PAM standard authentication). Copy puts it straight on the clipboard without showing it; Reveal displays it for 60 s. Either one is recorded on the customer's event timeline. Last vaulted value — if root@pam was changed on the box without re-vaulting, this is stale. Danger zone Removing this host deletes its reports, guests, log bundles and WireGuard peer, and permanently invalidates its API key — a still-running agent would receive 401s. Re-enrollment requires the Day-0 passphrase flow. Remove host… … Move key escrow to retained custody (required when escrow present) + remove DR bundle for this host Type the host id to confirm: Confirm & remove Cancel Auto-refreshes every 60 seconds · Felhom Hub 0.149.0 