jeremy/hobbs-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
8715589cbbf9bc3a268a6faa10fd5e015bb79dce
hobbs-iac/tv app/Hobbs-Family-Organizer-Self-Hosted-v1.0.0/RELEASE-NOTES.md
T
jeremy 8715589cbb feat(hobbs-organizer): v1.1.0 password-protected LAN-only admin for calendar links 
- /admin: first-visit password setup (scrypt), signed 30-day session cookie,
  calendars add/remove/reorder/rename/color/hide, masked URLs, per-feed test,
  history (20) with restore; /photo-admin -> /admin#photos placeholder
- settings in local /data (settings.json + auth.json + history/), seeded once
  from the calendar secret; dashboard + health read from settings
- start.mjs drops privileges after reading secrets and runs a front proxy that
  stamps the real client IP; admin refuses non-LAN and proxied requests
- deploy: HOBBS_DATA_DIR=/var/lib/hobbs-organizer/data, image 1.1.0 (1.0.0 kept)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E9NnVEico3WvFxLyjy1iW3
2026-11-04 18:55:00 -06:00

1.4 KiB
Raw Blame History

1.1.0 (2026-11-04)

  • Password-protected, LAN-only /admin screen for calendar links (masked, test, history/restore).
  • Calendars are read from /data/settings.json (seeded once from the calendar secret).
  • The supervisor drops privileges right after reading secrets. A front proxy on :3000 records the real client IP.
  • /photo-admin redirects to /admin#photos, a placeholder for the upcoming photo frame.

Release 1.0.0

Built and validated on 2026-11-04.

  • Replaced the hosted Cloudflare/Vinext runtime with a standard production Next.js container.
  • Added runtime-only calendar secrets and optional bearer authentication.
  • Added configurable timezone and weather settings, bounded feed responses, redirect validation, health checks, and hardened Compose settings.
  • Included cross-platform configuration, backup, restore, and migration documentation.
  • Included NVIDIA Shield wrapper v1.4 (com.dayline.tv, version code 5) with local URL support, exact-origin enforcement, optional bearer injection, controlled private-LAN HTTP, internal-CA support, and hosted rollback.
  • Preserved the existing app identity, signing certificate, private app data, and per-device schedule flag during in-place upgrades.

The current hosted dashboard and installed Shield applications are not changed merely by extracting this package. Follow MIGRATION.md when the internal server URL is ready.

Reference in New Issue View Git Blame Copy Permalink