admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e221476ff5e0952d1c806f8bfe881a1a84f6aeec
felhom.eu/hub/internal
T
History
admin e221476ff5 R-136: operator session cookie renamed to __Host-hub_session (always Secure, Path=/, no Domain) 
A sibling subdomain can no longer toss a session cookie the hub reads first. Operators are logged out
once; plain-HTTP browser login no longer holds a session; Basic auth for scripts is unchanged.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-05 21:45:04 +02:00
..
api
R-879: seal box API keys, owner passphrases, controller keys and PBS-DR tokens at rest
2026-10-05 21:45:04 +02:00
assets
…
claim
hub v0.123.0: app_stopped_unhealthy (decision 28); 09 decisions 26-28 recorded
2026-09-24 11:38:13 +02:00
cloudflare
hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)
2026-10-05 19:43:37 +02:00
configgen
R-879: seal box API keys, owner passphrases, controller keys and PBS-DR tokens at rest
2026-10-05 21:45:04 +02:00
dbsnap
hub v0.136.0: nightly VACUUM INTO snapshot, keep 2 (R-173 decision A); hub PVC 2Gi + Longhorn default group; 09 rulings 125-127; 05 §16.3
2026-10-05 14:28:30 +02:00
gitea
hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)
2026-10-05 19:43:37 +02:00
hetznerapi
…
i18n
hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)
2026-10-05 19:43:37 +02:00
intent
…
mailrelay
…
monitor
hub v0.134.0: a down box is judged on longer missed-backup lines (R-872); household outage mail at most weekly (R-873); backup_catchup_done allowed (R-871)
2026-10-05 09:24:14 +02:00
notify
hub v0.135.0: CSRF on the Basic-auth path (R-135), console passwords sealed at rest (R-133), boxes left behind listed and alarmed (R-604, R-530), no-e-mail banner (R-508)
2026-10-05 11:12:56 +02:00
offsite
R-196 / R-204 item 2: a re-issue no longer marks a healthy escrow stale (hub v0.95.0)
2026-08-05 07:17:29 +02:00
offsiteheal
hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822
2026-10-03 16:57:04 +02:00
offsitekeys
hub v0.129.0: operator raises ONE clean-up window's cap (R-833); restore-beside script + runbooks (R-834)
2026-10-04 08:56:56 +02:00
osupdates
hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)
2026-10-05 19:43:37 +02:00
pbsdrheal
hub v0.68.0 — auth_failed self-heal, consumed_at honesty gauge, wrapper drift (R-39 + R-50b(a))
2026-07-21 10:01:35 +02:00
poke
…
semver
…
store
R-879: seal box API keys, owner passphrases, controller keys and PBS-DR tokens at rest
2026-10-05 21:45:04 +02:00
sysfacts
hub v0.133.0 (R-859 test approvals end with the test; R-840 bundle on the System page, manifest, alarm); installer 1.31.0 (root files from the config bundle); bundle bootstrap script; golden 0.293.0 evidence; rulings 96–99; drill-r50 removed (evidence)
2026-10-04 20:18:37 +02:00
tenantsync
…
web
R-136: operator session cookie renamed to __Host-hub_session (always Secure, Path=/, no Domain)
2026-10-05 21:45:04 +02:00
wgsync
…