felhom.eu/STATUS.md

STATUS — what works, what's broken, what's next

Ready for the first real tester (Tester-2): yes. Tester 2 (a laptop) is off; nothing was sent to it.

Updated 2026-10-16 (midday). Controller 0.319.0 (the app page in panels, the login in one panel) is the floor, MinAgent 0.158.1 — REPORT-app-page-tuning-2026-10-16.md. Earlier (morning): Storage identity build B shipped: agent 0.158.1 and golden 0.318.0 vouched by you, controller 0.318.0 is the floor (MinAgent 0.158.1), installer 1.33.0 published — new one-disk boxes get their own data area. Open items: see documentation/backlog/OPEN-ITEMS.md. Older notes, day by day: documentation/backlog/STATUS-HISTORY.md. Reports: REPORT-night-2026-10-14.md, REPORT-immich-rollout-2026-10-14.md, REPORT-seo-felho-tarhely-2026-10-14.md, REPORT-immich-repair-2026-10-14.md, REPORT-power-cut-fixes-2026-10-14.md, REPORT-night-power-2026-10-13.md, REPORT-poweroff.md.

What works

• RomM game saves are in the backup now (2026-10-16, catalog): a save survived a backup, a removal and a restore on demo-hp, byte for byte. Eight apps no longer claim „a known, shared password" (your D10 = A). If someone changes the file manager's password in the file manager, the box notices and offers a new one (controller 0.321.0).

• Every installed app says where its login is, and has a „Fájlok ↗" button to its folder (controller 0.320.0, 2026-10-16). The file manager is shown as part of the box again, with its password; on a box that does not know that password, one press sets a new one (done on demo-hp and, at your yes, on the N100).

• Every app but three has a user guide and an FAQ, in Hungarian and English (catalog, 2026-10-15 night): the „Útmutató” tab shows it on boxes with controller 0.315.0 or newer. Every button name in a guide was checked in the app's own files at the version we ship; a guide that could not be checked stays hidden (plant-it, home-assistant), and Emby has none (R-1092).

• The N100 is the lived-in box (since 2026-10-15): used like a household's box, changed only through the product. qBittorrent, Prowlarr, Sonarr and Radarr are installed and linked by the box; films never go off-site (checked before any download). Its diary: documentation/lived-in/n100.md.

• A restored app comes back exactly as safe as it was at the backup: closed to strangers until its first account is made (0.314.0, proven on the scratch box). A box on a test build now moves with the floor (Tester 1 did, by itself). The box claims Plex again (demo-hp's Plex claimed through the dashboard, 2026-10-15). A brand-new box from the public installer updated itself to the floor 3 minutes after it was linked (test box, since removed).

• Scripts use the hub with a scoped token, not your password (hub 0.153.0): CC sets the floor with its own token; no token can see a secret, delete anything, or send, make or show a household's password or link. Your new hub password is yours alone (changed 2026-10-15).

• Every public name of the three test boxes answers only over https: plain http gets a 301 to the same https address, and browsers are told to remember it for one day (29 names checked, 2026-10-14 night).

• Media apps work together on one drive: a download reaches Sonarr/Radarr as one file, no copy; the download apps see only their own folder (live catalog, proven on demo-hp).

• A power cut in the middle of a backup no longer blocks later backups: the box removes the half-written backup at start-up (proven with a real cut on demo-hp, on all three boxes now).

• After a power cut, Immich repairs the photos the cut left broken, by itself, and the app page lists any lost photo (proven with a real cut on demo-hp: 41 of 41 repaired; on all three boxes now). An Immich update cannot switch it off quietly: the catalog refuses an untested Immich version.

• A household can switch the machine off; the hub holds alarms for 14 days and clears the state by itself (N100).

• A real power cut on demo-hp: it started by itself after all 8 cuts of the night (with the BIOS set), every app back in ~4 min; stale and recovered mails true and paired.

• A page for people searching „felhő tárhely" is live (/sajat-felho-tarhely, /en/own-cloud-storage): what cloud storage is, what to do when Google or iCloud fills up, a five-year cost table with prices read 2026-10-14, and who should NOT buy this.

• The machine estimator is public (/gepigeny, /en/sizing), with figures from two machines (N100 and HP t740; raised only, 2026-10-14).

• 65 apps in the catalog. New today: Prowlarr — you enter your download sources once, and Sonarr and Radarr get them, linked by the box with no button (the website lists 63 apps — R-1036). OS updates, the kernel lane too, run at night.

• The hub is closed again after the 2026-10-12 security review; one box cannot read another's data.

• Felhom runs in a virtual machine on OpenMediaVault 8, tried on an exact copy of the first outside tester's box: install, bind, claim, apps, backup, and back by itself after an OMV restart. The Hungarian guide for him is documentation/pilot/GUIDE-omv-kvm-hu.md; open: one-disk Jellyfin (R-1068), NAS films for Jellyfin (R-1071, yours), no disk health in a VM (R-1073, yours). Waits on you: send the guide; delete test customer Tester4 in the hub.

• A second local copy counts only when it is on a different physical disk, and the box can prove it. Inside a virtual machine the box makes the copy but says „A Felhom nem tudja ellenőrizni…" (Tester 1). On real disks nothing changes (demo-hp, N100). A NAS never hides the „only one copy" notice. A box with no drive refuses a media app in words, with a link to the Meghajtók page. Live on the three test boxes; the NAS and no-drive parts are unit-tested only. Next: build B (the internal place on one-disk boxes, R-1079). Your rulings D1–D6 are in the design (architecture/16-storage-physical-identity.md).

• One-disk boxes get their own data area (2026-10-16): a new install makes a „Belső tárhely" on the disk, outside every whole-box copy, and media apps install there with no extra step (proven on a fresh 512 GB box: 213 GiB area, Jellyfin with no extra step). A disk split into parts can be used part by part. The backup offer no longer promises disk-failure safety when it cannot check the disk, and /mnt/sys_drive is no longer offered.

What is broken

• Several root-level weaknesses wait on your four decisions below (R-954, R-971, R-982, R-985).
• DooPlex: a failed disk with its alarms silenced (R-934); CI jobs still get lost (R-887); something sets the shared checkout to „bare" (R-935); a Longhorn volume at 91 %.
• Tester 2 has never made an off-site check (R-862). The scratch box cannot read the drill catalog (R-992).

What we work on

• The power-cut findings still open (R-1004, R-1005, R-1010, R-1012, R-1013).
• Media apps on every drive (R-1023): live with the 0.313.0 floor — every drive in every media app, a new drive made ready by the box, a pulled drive loses nothing, a safe removal lets go first and the drive comes back by itself.

Waiting on you — decide

#	Row	Question	Pick	The other option costs	If you do nothing	Blocked
D1	R-954	Change every box's break-glass root password, since we cannot see if the old key was used?	Yes — about one hour, one box at a time, through the vault	Accept: no work, a password that may have been read stays valid	the old root passwords stay; if they were read, they still open the boxes from the LAN or console	—
D2	R-971	Should the box refuse a catalog change that asks for dangerous container rights?	Yes — an allow-list on the box (one controller release)	Keep trusting the catalog repo: whoever can push to it reaches every box	a catalog push keeps reaching every box's apps with no check	—
D3	R-985	„Zero-knowledge": change the wording, or remove the operator's root reach to the key?	Change the wording now; revisit after the first sale	Remove the reach: a design change to break-glass	the promise stays stronger than the product	the website text
D4	R-982	Root SSH with a password from the LAN?	No — key only; the password stays for the console	Keep it: anyone on the household network can try it	the host keeps accepting root password logins from the LAN	—
D5	R-993 (R-991)	Approve the minimum machine (audits/sizing-2026-10-13/SIZING.md §5: x86-64, 4 cores, 8 GB, 256 GB SSD)?	Approve	Change it: one edit	no hardware page; a buyer with a Raspberry Pi can still download the installer	the hardware page
D6	R-992	The scratch box cannot read the private drill catalog: give it a read-only login, or make that copy readable?	A read-only login	Readable copy: the drill catalog becomes public	every new-app test needs hand-staging	new-app tests
D7	R-990, R-989	Rule yes / no / later on the forum ideas (audits/forum-research-2026-10-12/FELHOM.md §5) and the selfh.st ideas (audits/selfhst-survey-2026-10-12/FELHOM.md §6)	—	—	nothing changes; the research ages	—
D8	R-206	Install DooPlex's Docker settings from git (restarts Docker), and prune the build cache weekly: yes or no?	Yes, in a quiet window	—	a rebuild of DooPlex still has the settings in git	—
D9	R-1062	The N100's USB drive is also its whole-box backup drive. Split it in two anyway?	No — keep one drive; the lived-in box keeps its nightly whole-box backup	Split: the box loses its local whole-box backup (or add a second drive first)	it stays one drive; multi-drive tests stay on Tester 1	—

Waiting on you — do

• Nézd meg a demo-hp-n a Calibre-Web „Adatok és mentés" fülét és a Fájlkezelőt (felhom.enkisfelhom.hu, controller 0.321.0, minden dobozon kiadva). A mentés egy részben, egyszerű szavakkal; a Fájlkezelő nem kér frissítést és nem ajánl „Install app"-ot.
• Look at roms/roms/ on the N100's drive in the file manager (R-1099). RomM now scans roms/<platform>/. A game uploaded through RomM before today sits one folder deeper: if there are platform folders in roms/roms/, move them up into roms/ and press „Scan” in RomM. If not: those games show under a platform called „roms”.
• Nézd meg a Calibre-Web oldalát a demo-hp-n (felhom.enkisfelhom.hu, controller 0.319.0, minden dobozon kiadva). A fejléc, a fülsor és minden rész most külön panel (az „A” stílus). A belépési adatok egy panelben vannak, egymás mellett. A Calibre-Web jelszaváról a doboz nem tud, mert az alkalmazás előbb települt, mint hogy a sablonban jelszó lett volna — ezt most egy mondat mondja ki. Ha nem tetszik, írd meg, mit változtassak. Ha nem nézed meg: semmi nem romlik el.
• Discard two unclaimed boxes and delete Tester4 (hub, browser only): the build B scratch VMs registered as unclaimed boxes — registration ids 40 (b43afa10…) and 41 (9c78ea30…); both VMs are destroyed. Tester4 (the throwaway customer) is switched off the household way. If not: two dead entries stay in the Hosts list and Tester4 stays in Customers.
• System poster needs a refresh: one-disk boxes now have a data area („Belső tárhely") on the system disk, outside the whole-guest backups (facts file updated 2026-10-16).
• Olvasd el a Plex és a Sonarr útmutatót a demo-hp-n (az alkalmazás oldalán az „Útmutató” fül). Ha más formát szeretnél, egy menetben átírom mind a 62-t. A robot 2026-10-16-án bejelentkezve megnézte: mindkét oldal megjelenik magyarul és angolul, 4 rész és a GYIK, minden sor egyezik a katalógussal. Ha nem nézed meg: csak a forma marad emberi szemmel nem látott.
• Nézd meg az AdventureLog és a Plex oldalát a demo-hp-n, a rendes címén (felhom.enkisfelhom.hu). A túl nagy keret javítva: a tartalom most 32 képpontra van a bal oszloptól és 36-ra a tetejétől (előtte 80 és 64 volt). Az alkalmazás oldala mostantól egy hasábban van: egy szélesség, vékony vonalak a szakaszok között, aláhúzott fül, és doboz csak ott, ahol az alkalmazás vár rád (kék) vagy ahol valami kockázatos (sárga). A „sikeres frissítés" sáv kis szürke sorrá vált a név alatt. Ha nem nézed meg: a felület él, csak senki nem látta még böngészőben.
• Nézd meg az új alkalmazás oldalt a demo-hp-n (egy telepített és egy nem telepített app). Egy alkalmazás mostantól egy oldal négy füllel (Beállítások · Adatok és mentés · Útmutató · Napló), az Indítás/Újraindítás/Leállítás a „Működés" kártyán van, és a „Vissza" az alkalmazáshoz visz, nem a listához. Mondd meg, jó-e így az elrendezés. Ha nem nézed meg: a felület él, csak senki nem látta még böngészőben — a robot a DooPlexen nem tud kattintani.
• The N100 sheet (about 30 minutes): documentation/audits/n100-lived-in-2026-10-15/SHEET.md — install Plex and claim it, make the admins in Prowlarr/Sonarr/Radarr, add your download sources in Prowlarr, add one show and one film. Then say „done". If not: the media apps wait, safe behind their gate.
• Delete the test customer „Tester3” in the hub (browser only). Its test box is already gone and switched off on purpose, so no alarm is coming. If not: a dead test customer stays in your list.
• Hub 0.153.0 (your rulings 13:20 + R-1059 „A"): no token can resend a claim code, create or edit a customer, make a passphrase or a link, or re-issue an off-site password. Live since 13:39 (checked with CC's token: all six refused).
• Remove the test server „plex-k6” from your Plex account (plex.tv → Settings → Authorized Devices). The claim test passed and the server is gone from Tester 1. If not: a dead server stays listed in your Plex apps.
• System poster needs a refresh: every public name answers only over https (http → 301).
• Leftovers moved out of the shared checkout to /mnt/5_hdd/felhom.eu/leftovers/2026-10-14/ (nothing deleted): the Facebook first-post/ folder is not in git — keep, commit or delete it. The rest is already in git. If not: it just stays there.
• The media tests on Tester 1 are finished — results in REPORT-night-2026-10-14.md. Say „tear it down" when you want Tester 1 back to normal (R-1022; now three test drives and a throwaway Plex).
• Ask Google to index the new page: Search Console → URL-ellenőrzés → https://felhom.eu/sajat-felho-tarhely → „Indexelés kérése". If not: the page may sit unseen, and the 11 November / 9 December checks (R-1035) read zero for a reason that is not the page.
• N100 BIOS: read „After Power Loss" (the HP's „Previous State" made it start after 8 of 8 cuts). HP BIOS: „Bypass F1 Prompt on Configuration Changes" → Enable.
• Pull the failed disk Z6A07P2G (R-934; the twin Z6A070XZ is /mnt/3_hdd). If not: its alarms return on 11 November.
• Hub master key into the password manager, then shred -u the key file (security review 2026-10-12, in the history).
• 12 reused homelab logins to rotate, and the repo-visibility decision (R-925, P1).
• Before the first paying customer: Tandoor permission (R-789); a lawyer for the licence list (R-802) and the terms (R-813); SparkyFitness (R-784 — its author replied on 2026-10-13); print the break-glass sheet (R-923).
• Smaller: pin the first Facebook post (R-917); Tester 2's bootstrap (R-862); look at the uncommitted deny-list edit in homelab-manifests/.claude/settings.json; the rest of „Your own tasks" (T6–T19) is in the history, 2026-10-10.