9 Commits

Author	SHA1	Message	Date
Gan, Jimmy	b8406c1252	fix: explicitly disable ML URL to prevent OCR job failures	2026-03-16 00:07:26 +08:00
Gan, Jimmy	512c8653a1	fix: remove ffmpeg thread limit causing SIGSEGV in Immich	2026-03-15 23:45:08 +08:00
Gan, Jimmy	9929567679	fix: bind Immich to 0.0.0.0 to allow Tailscale access	2026-03-15 00:29:45 +08:00
Gan, Jimmy	d0078f7e9d	fix: update Immich healthcheck to use curl and limit ffmpeg threads	2026-03-15 00:22:05 +08:00
Gan, Jimmy	62856c9343	fix: comprehensive dark mode support across all pages ... - Fix body/html dark background to surface-950 - Add dark scrollbar styling - Fix App.svelte wrapper to use Tailwind dark: classes instead of conditional strings - Add dark:bg-surface-800 and dark:border-surface-700 to all cards in Dashboard, Docker, Files, Gitea - Add dark text variants for headings, labels, and content text - Add dark hover states for interactive elements - Enable cross-category sidebar drag-and-drop	2026-03-01 14:59:23 +08:00
Gan, Jimmy	4b32929dcc	feat: watchtower tracking, dev environment, security logs page ... - watchtower: docker-compose with label filtering, email notifications - watchtower labels on navidrome, openclaw, immich services - dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow - dev.nas.jimmygan.com Caddy site block with Authelia forward_auth - security page: backend router parsing Authelia/Caddy container logs - security page: frontend with stats cards, timeline, top IPs, event log - wired security route into App.svelte and Sidebar	2026-03-01 00:40:14 +08:00
Gan, Jimmy	cdd364e645	security: bind service ports to localhost only ... Bind navidrome, n8n, immich, openclaw, gitea web ports to 127.0.0.1 to prevent direct LAN access bypassing Caddy/Authelia. Tailscale userspace networking on Synology proxies through localhost, so VPS Caddy access via Tailscale IP continues to work. Gitea SSH port (2222) remains on all interfaces for external git push.	2026-02-28 22:47:36 +08:00
Gan, Jimmy	64ecd99dc7	Add OpenClaw, backup automation, health checks, Telegram notifications ... Phase 6: OpenClaw docker-compose (port 3100) with health check Phase 9: Enhanced backup.sh with full DB/config coverage + Telegram alerts Phase 10: Health checks on all compose files, /api/system/notify endpoint	2026-02-19 21:40:34 +08:00
Gan, Jimmy	bf49e13e56	Add settings page with change password, fix terminal ws bug	2026-02-19 17:29:03 +08:00