- Switch to shoutrrr notification URL format - Use extra_hosts to resolve smtp.gmail.com to local tunnel (192.168.31.222:1587) - Add URL-encoded SMTP credentials for shoutrrr URL compatibility - SSH tunnel: NAS:1587 -> server2 -> smtp.gmail.com:587
- watchtower: docker-compose with label filtering, email notifications - watchtower labels on navidrome, openclaw, immich services - dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow - dev.nas.jimmygan.com Caddy site block with Authelia forward_auth - security page: backend router parsing Authelia/Caddy container logs - security page: frontend with stats cards, timeline, top IPs, event log - wired security route into App.svelte and Sidebar