# The N100 — the lived-in box (diary) **What it is.** `demo-felhom` (N100 mini-PC, guest 9201, `felhom.demo-felhom.eu`). From 2026-10-15 it is used the way a household uses a box, and it changes only through the product. **The rule:** `architecture/09-update-architecture.md` §3 decision 254 — the dashboard, the hub, the normal release train and the OS update rings only; no deliberate failure without the operator's word for that one act; reads and observation are free. Tiers: `runbooks/target-selection.md`. **What it runs (2026-10-15):** controller 0.314.0, agent 0.156.1. Apps: opengist (standing), qBittorrent, Prowlarr, Sonarr, Radarr (installed 2026-10-15 through the dashboard). Plex: the operator installs it. Drives: the system SSD and the USB drive `hdd_1` (ADATA HD710 PRO / TOSHIBA MQ04ABF100, 931.5 GB), which is also the whole-guest backup target. **How to add a line.** Anyone — the operator or a session — who notices something on the N100 adds a dated line below: what happened, who noticed, and the register row it became. Prose here is not a record; the row is. ## Diary - **2026-10-15 — the rule starts.** Written as decision 254. (CC, n100-lived-in task) - **2026-10-15 — the USB drive stays one drive.** The operator asked for a split in two. Read first: it holds no family files — 2.7 GB of the box's nightly whole-guest backups (`dump/`), 3.1 GB of app backups and an off-site restore copy, 422 MB of leftover app data from removed apps. It is the whole-guest backup target, so the product refuses to retire it, and the box has no other drive for that role. Nothing was changed. → R-1062 (the operator decides), R-1063 (the dashboard's half-state on that refusal, read from the code). (CC) - **2026-10-15 — media apps installed through the dashboard.** qBittorrent, Prowlarr, Sonarr, Radarr — each healthy in under 35 s; the box chose `hdd_1` for their own config (the wizard asks no drive). The box wired them by itself: Sonarr `…/media/tv` and Radarr `…/media/movies`, tag `hdd-1`, qBittorrent as their client with categories `tv-hdd-1` / `movies-hdd-1` saving under `…/media/torrents/` (the same drive, so imports can be hardlinks); Prowlarr linked to both. A stranger meets the gate on Prowlarr/Sonarr/Radarr and qBittorrent's own login. (CC) - **2026-10-15 — films never go off-site, proven before any download.** The controller's own classifier over the deployed apps: off-site takes no media path; the cross-drive tier would take only qBittorrent's downloads and is not on for it (with one data drive it falls back to the SSD with state only); the whole-guest backup excludes the drives (its log: „excluding bind mount point mp8"). (CC) - **2026-10-15 — demo-hp, not the N100:** the leftover `/mnt/sizing-bench` was removed through the dashboard; it held two apps' cross-drive copies and the dashboard said nothing about them → R-1064. The hub showed demo-hp OK at its next report (14:56 UTC). (CC) - **2026-10-15 — read before the operator's Plex install:** a freshly claimed Plex gets no libraries until the next wiring run (the claim does not start one) → R-1065; the sheet asks for „Bekötés most" only if no library appears. (CC, from the code) - **2026-10-16 — the file manager's password, set by the box at the operator's yes.** Controller 0.320.0 arrived by the normal update path. The N100 did not know FileBrowser's password (set by hand in September, R-513 `operator`), so the household could not open the file manager. The dashboard's „Új jelszó beállítása" (pressed through its endpoint, after the operator's yes in chat): 200 in 3.5 s; the page now shows the password behind „Megjelenítés"; inside the box the new password logs in (200), admin/admin is refused (401), the state is `generated`. Evidence: `audits/logins-folders-2026-10-16/live/n100-fb-reset-*.txt`. (CC) - **2026-10-17 — the file manager unreachable from outside for ~21 minutes, after controller 0.327.0.** 0.327.0 arrived by the normal update path (11:43:38 UTC) and moved FileBrowser off Traefik's network until its default password is checked (R-1126); the box checked and joined it (11:43:44), but Traefik kept the address it had picked at the container's start, so `files.demo-felhom.eu` timed out (seen by the release's box walk). Controller 0.327.1 (a file route by name) reached the N100 by the normal update path at 12:04:45; `files.demo-felhom.eu` 200, the default login refused (401). No data touched. Register: fixed within the release, recorded in R-1126's close. Evidence: `audits/filebrowser-memory-ci-2026-10-17/release/box-walk.txt`. (CC)