admin
0e88b7eb99
gates / gates (push) Successful in 6m34s
- 15-media-library.md §10: what the box does on each drive event, per app, with the measured call; the guards that ARE needed and the ones that are NOT (K1: nothing lost while a drive is gone). - Evidence K4 (dead-drive check: mountinfo `shutdown`, stat unreliable), K5 (restart), K6 (unclaimed Plex), K7 (old Sonarr/Radarr repair on the bench), K8 (hub received the drive-return events and mailed none), K9 (files identical). - nightly-rotation.md runs scripts/https_only_check.py first every night; scripts/CHANGELOG.md entry. - STATUS, CONTEXT (decisions 244-246), REPORT-night-2026-10-14.md. Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
691 B
691 B
K6 predictions (before the run, ~23:28 CEST)
- An unclaimed Plex starts fine with no PLEX_CLAIM; /identity says claimed=0.
- While unclaimed, Plex lets a request from a private address in WITHOUT a token (it treats the LAN as the owner) — which is exactly why it must not be reachable through the tunnel unclaimed (traefik's address is private).
- Plex's own API takes a claim code AFTER the start: POST /myplex/claim?token=
on the server — so the box can ask for the code only when the server is up (no 4-minute race with the image pull). Proof needs the household's plex.tv account → the morning step; without it, the route's answer to an invalid code shows it exists.