jeremy/hobbs-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(hobbs-organizer): v1.1.0 password-protected LAN-only admin for calendar links

Browse Source 
- /admin: first-visit password setup (scrypt), signed 30-day session cookie,
  calendars add/remove/reorder/rename/color/hide, masked URLs, per-feed test,
  history (20) with restore; /photo-admin -> /admin#photos placeholder
- settings in local /data (settings.json + auth.json + history/), seeded once
  from the calendar secret; dashboard + health read from settings
- start.mjs drops privileges after reading secrets and runs a front proxy that
  stamps the real client IP; admin refuses non-LAN and proxied requests
- deploy: HOBBS_DATA_DIR=/var/lib/hobbs-organizer/data, image 1.1.0 (1.0.0 kept)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E9NnVEico3WvFxLyjy1iW3
This commit is contained in:
jeremy
2026-11-04 18:55:00 -06:00
parent e9c7e9df1a
commit 8715589cbb
28 changed files with 1532 additions and 380 deletions
Download Patch File Download Diff File Expand all files Collapse all files
compose/hf-pdocker-02/hobbs-organizer/.env
+4
View File
@@ -19,3 +19,7 @@ NWS_FORECAST_URL=https://api.weather.gov/gridpoints/TSA/37,98/forecast
# The National Weather Service asks clients to identify themselves. Replace
# the example contact with an address monitored by the server operator.
WEATHER_USER_AGENT="Hobbs-Family-Organizer/1.0 (self-hosted)"
# Admin (v1.1.0)
HOBBS_DATA_DIR=/var/lib/hobbs-organizer/data
ADMIN_ALLOWED_CIDRS=192.168.86.0/24,127.0.0.1/32
compose/hf-pdocker-02/hobbs-organizer/README.md
+8
View File
@@ -1,5 +1,13 @@
# Hobbs Family Organizer (Shield TV dashboard) — hf-pdocker-02
**v1.1.0 (2026-11-04): admin screen at http://192.168.86.100:8340/admin** — password (set on first visit, LAN only),
calendar links (add/remove/rename/color/hide, masked after save, per-calendar Test, history + Restore).
Settings live in `/var/lib/hobbs-organizer/data/` (local disk, owner 10001, mode 700):
`settings.json` (calendars, incl. URLs — treat as secret), `auth.json` (scrypt hash + session key), `history/` (last 20).
Forgot password: `docker exec -u 10001 hobbs-family-organizer-organizer-1 node container/reset-admin.mjs`.
The secrets-file calendar list is now only a seed used when `settings.json` does not exist yet.
Rollback: set `image: hobbs-family-organizer:1.0.0` (still on .100) — it ignores /data and reads the secrets file.
Deployed 2026-11-04. URL: http://192.168.86.100:8340/ (LAN only, trusted-LAN mode = no token).
- App source / release bundle: `tv app/Hobbs-Family-Organizer-Self-Hosted-v1.0.0/` (repo root).