jeremy
8715589cbb
- /admin: first-visit password setup (scrypt), signed 30-day session cookie, calendars add/remove/reorder/rename/color/hide, masked URLs, per-feed test, history (20) with restore; /photo-admin -> /admin#photos placeholder - settings in local /data (settings.json + auth.json + history/), seeded once from the calendar secret; dashboard + health read from settings - start.mjs drops privileges after reading secrets and runs a front proxy that stamps the real client IP; admin refuses non-LAN and proxied requests - deploy: HOBBS_DATA_DIR=/var/lib/hobbs-organizer/data, image 1.1.0 (1.0.0 kept) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01E9NnVEico3WvFxLyjy1iW3
Hobbs Family Organizer (Shield TV dashboard) — hf-pdocker-02
v1.1.0 (2026-11-04): admin screen at http://192.168.86.100:8340/admin — password (set on first visit, LAN only),
calendar links (add/remove/rename/color/hide, masked after save, per-calendar Test, history + Restore).
Settings live in /var/lib/hobbs-organizer/data/ (local disk, owner 10001, mode 700):
settings.json (calendars, incl. URLs — treat as secret), auth.json (scrypt hash + session key), history/ (last 20).
Forgot password: docker exec -u 10001 hobbs-family-organizer-organizer-1 node container/reset-admin.mjs.
The secrets-file calendar list is now only a seed used when settings.json does not exist yet.
Rollback: set image: hobbs-family-organizer:1.0.0 (still on .100) — it ignores /data and reads the secrets file.
Deployed 2026-11-04. URL: http://192.168.86.100:8340/ (LAN only, trusted-LAN mode = no token).
- App source / release bundle:
tv app/Hobbs-Family-Organizer-Self-Hosted-v1.0.0/(repo root). - Deploy dir on NAS:
/mnt/docker-data/compose/hf-pdocker-02/hobbs-organizer/= the release bundlecompose.override.yaml+.envfrom this folder. Image is built locally (hobbs-family-organizer:1.0.0).
- Secrets on LOCAL disk of .100 (root:root 600):
/var/lib/hobbs-organizer/secrets/calendar_ical_urls.json— JSON array of private Google Calendar basic.ics URLs (treat as passwords; never commit)organizer_access_token.txt— empty = trusted-LAN mode. Put a 32+ char token here for bearer mode.
- Redeploy:
cd /mnt/docker-data/compose/hf-pdocker-02/hobbs-organizer && docker compose up -d --build --wait - Health:
curl http://192.168.86.100:8340/api/health - Shields (package
com.dayline.tv, APK v1.4) readfiles/base_url+files/allow_insecure_httpprovisioned over ADBrun-as. adb client lives on .100 (apt install adb). - Shield provisioning (bash port of configure-shield.ps1, run on .100):
provision-shield.sh <ip> <base_url>