felhom.eu/REPORT.md

felhom.eu — task reports

Overwrite this file with a summary of the most recent task only (uniform with the other repos; not cumulative). The cumulative hub history lives in hub/CHANGELOG.md.

---

REPORT — Hub GUI correctness + pull-based config delivery (hub v0.26.0)

Date: 2026-06-30 · Repo: felhom.eu (hub/) · Companion: felhom-controller v0.94.0

Implements the "retire the 5 inbound controls + pull-based config-refresh" task. Resolves audit documentation/audits/AUDIT-hub-gui-2026-06-30.md F-S1/F-S4 + the dead-template findings.

Baselines

• hub felhom.eu was e51e03b (v0.25.0) → code a3ac6c9, manifest d88b43a (v0.26.0, live on k3s).
• (companion) felhom-controller v0.93.0 → v0.94.0.

What changed (hub)

• Pull-based config delivery. New customer_configs.config_version (stored counter, NOT a YAML hash — configgen emits a fresh session_secret+timestamp each call). SaveCustomerConfig bumps it on every save (new=1, updates increment). The report ACK (handleReport) advertises config_version beside the floor/latest; omitted for report-only customers.
• Retired the 5 inbound (hub→box) controls (01-topology-and-trust.md:11 never-inbound): Trigger Update, Push Config, Pull Config, Show Diff (+compareYAMLValues/flattenYAML/maskSensitive helpers + dead ConfigSyncStatus/ConfigDiffCount) — handlers + routes + buttons + JS deleted. Geo-disable KEEPS its hub→Cloudflare RemoveGeoRules; its inbound notifyControllerGeoDisable deleted.
• GUI staleness + dead templates. Setup Commands now show sudo ./felhom-host-install.sh --customer-id <id> (no-echo passphrase) instead of docker-setup.sh; Option 2 relabelled "Manual config fetch (debug only)". Deleted orphaned customer.html + config_detail.html.

Files

internal/store/store.go (column + bump + 3 SELECTs + struct), internal/api/handler.go (ACK), internal/web/server.go (routes + handleTriggerUpdate removed), internal/web/configs.go (handlers/helpers removed, geo trimmed), internal/web/templates/customer_unified.html (setup cmd, buttons/JS removed), deleted customer.html+config_detail.html, manifests/hub.yaml (tag). Tests: internal/store/config_version_test.go, internal/api/config_version_ack_test.go.

Tests & green gate

• go build ./... && go vet ./... && go test ./... — all green.
• Red-proof (version bump): with the config_version + 1 bump defeated, both TestSaveCustomerConfig_BumpsConfigVersion and TestReportACK_ConfigVersion FAIL (config_version after edit = 1, want 2) — the bump is load-bearing. Restored → green.
• No-inbound: grep client.Do internal/web/ → only Gitea registry/template fetches; zero ControllerURL targets (ControllerURL remains a display-only link).

Live validation (demo, hub.felhom.eu + guest 9201)

• Hub v0.26.0 rolled out on k3s (Synced/Healthy, [INFO] felhom-hub … starting).
• Live ACK for demo-felhom: {"config_version":1,"latest_version":"0.94.0","min_controller_version":"0.87.0","status":"ok"}.
• Bumped demo-felhom config_version 1→2 in the hub DB (equivalent to a config save; the SaveCustomerConfig bump itself is unit-tested + red-proofed). The controller detected it, re-pulled, and self-restarted (see controller REPORT for the box-side trace) — full pull-based delivery, no inbound connection.

Open follow-ups (from the audit, not in scope here)

Hosts page (F-M1); controller-side geo intent sync (geo-disable is now CF-only, no box notify); Show-Diff could return later as a read-only hub-vs-reported view.