BIGNIGHT phase 3: immich + vaultwarden seeded; R-512 filed (vaultwarden open signup, read-only control)

2026-09-14 20:27:52 +02:00
parent 3a7bbd2f6b
commit 8a12c9a1bc
7 changed files with 65 additions and 0 deletions
@@ -321,3 +321,14 @@ Household use: a child deletes foto-007 (204 → 404); trashbin lists it; restor
 Admin used 343 161 297 B. Nextcloud 34.0.1.

 **immich** 18:22:57 deploy → +116 s `degraded` → +126 s `starting` … (continues below).
+
+**immich** running after 146 s (degraded 116 s on the way). Seed through its API: admin sign-up (201), **200 JPEG
+uploads, 200 × 201 in 16 s**; stats photos 200, 275 682 444 B; ML queues draining (faceDetection / smartSearch / ocr).
+
+**vaultwarden** 18:25:37 → running **15 s**. Seed with the Bitwarden client crypto (PBKDF2 600 000, AES-CBC + HMAC):
+register (200), token (200), **10 login entries** (200 × 10), `/api/sync` → 10 items, **all names decrypt to the
+originals**. Attachment: the v2 slot's returned `url` is `/ciphers/<id>/attachment/<id>` — posting it to the web root
+404s, under `/api` 200 (a client detail, the harness's first try left one empty attachment slot on „Ügyfélkapu+").
+The retried attachment downloads 200 with its recorded size; byte-equality not proven (harness lost the key).
+**Finding R-512 (P2):** registration stays open and the page's instruction to close it points at a read-only
+field; a stranger registered with no invite (200).
@@ -0,0 +1,9 @@
+  select HDD_PATH: options=['Adatlemez — 92.1 GB szabad (alapértelmezett)'] -> /mnt/felhom-drives/hdd_1
+  select PAPERLESS_OCR_LANGUAGE: options=['Magyar', 'Angol', 'Magyar &#43; Angol', 'Német &#43; Angol'] -> hun
+paperless-ngx: fields ['DB_PASSWORD', 'HDD_PATH', 'PAPERLESS_ADMIN_PASSWORD', 'PAPERLESS_ADMIN_USER', 'PAPERLESS_OCR_LANGUAGE', 'PAPERLESS_SECRET_KEY', 'SUBDOMAIN']; secrets in /tmp/claude-1000/-mnt-5-hdd-felhom-eu-git/a23ddbf6-6c9b-4b80-8fa9-69a2a962eeb6/scratchpad/apps/paperless-ngx.json: ['DB_PASSWORD', 'PAPERLESS_SECRET_KEY', 'PAPERLESS_ADMIN_PASSWORD']
+POST 18:26:12
+  -> {"ok":true,"message":"Telepítés elindítva – az állapot a kártyán követhető"}
+
+  +5s not_deployed
+  +10s deploying
+  +81s starting
@@ -0,0 +1,8 @@
+  select SIGNUPS_ALLOWED: options=['Igen – regisztráció engedélyezve', 'Nem – regisztráció lezárva'] -> true
+vaultwarden: fields ['ADMIN_TOKEN', 'SIGNUPS_ALLOWED', 'SUBDOMAIN']; secrets in /tmp/claude-1000/-mnt-5-hdd-felhom-eu-git/a23ddbf6-6c9b-4b80-8fa9-69a2a962eeb6/scratchpad/apps/vaultwarden.json: ['ADMIN_TOKEN']
+POST 18:25:37
+  -> {"ok":true,"message":"Telepítés elindítva – az állapot a kártyán követhető"}
+
+  +5s starting
+  +15s running
+vaultwarden: final running after 15s
@@ -0,0 +1,9 @@
+18:25:52 ping 200 {"res":"pong"}
+18:25:52 admin sign-up 201 {"id":"92edabde-2331-4d62-808b-6b183f35c0c8","email":"csalad@enkicsifelhom.hu","name":"Kovács Anna","profileImagePath":"
+18:25:52 login 201
+18:26:09 uploaded 200 in 16s codes {201: 200}
+18:26:09 stats 200 {"photos":200,"videos":0,"usage":275682444,"usagePhotos":275682444,"usageVideos":0,"usageByUser":[{"userId":"92edabde-2331-4d62-808b-6b183f35c0c8","userName":"Kovács Anna","photos":200,"videos":0,"usa
+18:26:09 jobs pending {'thumbnailGeneration': (3, 129), 'metadataExtraction': (5, 6), 'faceDetection': (2, 55), 'smartSearch': (2, 55), 'storageTemplateMigration': (1, 0), 'ocr': (1, 56)}
+18:26:39 jobs pending {'faceDetection': (2, 194), 'smartSearch': (2, 181), 'ocr': (1, 197)}
+18:27:09 jobs pending {'faceDetection': (2, 188), 'smartSearch': (2, 163), 'ocr': (1, 193)}
+18:27:39 jobs pending {'faceDetection': (2, 182), 'smartSearch': (2, 144), 'ocr': (1, 189)}
@@ -0,0 +1,25 @@
+18:26:11 register /identity/accounts/register 200 {"captchaBypassToken":"","object":"register"}
+18:26:12 token 200 {"AccountKeys":null,"ForcePasswordReset":false,"Kdf":0,"KdfIterations":600000,"KdfMemory":null,"KdfParallelism":null,"Ke
+18:26:12 cipher 200
+18:26:12 cipher 200
+18:26:12 cipher 200
+18:26:12 cipher 200
+18:26:12 cipher 200
+18:26:12 cipher 200
+18:26:12 cipher 200
+18:26:12 cipher 200
+18:26:12 cipher 200
+18:26:12 cipher 200
+18:26:12 attachment slot 200 {"attachmentId":"5090ce0842ccb25ae6fa","cipherResponse":{"archivedDate":null,"attachments":[{"fileNa
+18:26:12 attachment upload 404 <!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta http-equiv="content-type" cont
+18:26:12 sync 200 items 10 decrypted names match True
+slot 200 url shape /ciphers/<id>/attachment/<id>
+upload try /ciphers/<id>/attachment/<id> 404
+upload try /api/ciphers/<id>/attachment/<id> 200
+attachment 404 1834 (an earlier empty slot or a different key)
+attachment 200 115922 (an earlier empty slot or a different key)
+attachment ugyfelkapu-helyreallito-kod.bin size field 64065 meta 200 download 404 1834
+attachment ugyfelkapu-helyreallito-kod.bin size field 115922 meta 200 download 200 115922
@@ -0,0 +1,2 @@
+18:27:20 SIGNUPS_ALLOWED deployed value: true
+a stranger (no invite, no login) registers idegen.probe@example.com -> 200 {"captchaBypassToken":"","object":"register"}