jimmy/nas-tools
1
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity
377 Commits 15 Branches 0 Tags
8f9cb6b611c933887586df35f6f760286871b155
Commit Graph

13 Commits

Author SHA1 Message Date
Gan, Jimmy a96cc76072 fix: use HuggingFace mirror for Immich ML model downloads
Run Tests / Backend Tests (push) Failing after 6m13s
Details
Run Tests / Frontend Tests (push) Failing after 10s
Details
Run Tests / Test Summary (push) Failing after 35s
Details 
- Add HF_ENDPOINT=https://hf-mirror.com for China network
- Remove proxy config (proxy not accessible from NAS)
- NAS has SSL/network issues reaching external HTTPS sites directly

This should allow models to download via China mirror instead of timing out.
 2026-04-06 01:03:15 +08:00
Gan, Jimmy 9560de6314 fix: increase Immich ML memory to 6GB and add model TTL config
Run Tests / Frontend Tests (push) Waiting to run
Details
Run Tests / Backend Tests (push) Failing after 3m11s
Details
Run Tests / Test Summary (push) Has been cancelled
Details 
- Increase memory limit from 4GB to 6GB for larger model downloads
- Add MACHINE_LEARNING_MODEL_TTL=300 to keep models in memory longer
- Add MACHINE_LEARNING_MODEL_TTL_POLL_S=10 for faster model unloading checks

Note: Models still failing to download due to network timeouts.
Uploads work but ML features (OCR, facial recognition) fail.
 2026-04-06 00:55:08 +08:00
Gan, Jimmy 50107a94f3 fix: restore dashboard dev CI and Immich mobile uploads
Run Tests / Frontend Tests (push) Has been cancelled
Details
Run Tests / Test Summary (push) Has been cancelled
Details
Run Tests / Backend Tests (push) Has been cancelled
Details 
- Change deploy-dev workflow runner from ubuntu-latest to nas
  Fixes: CI failing to access /volume1/docker paths

- Add missing immich-machine-learning service to compose
  Fixes: Mobile photo uploads failing due to ML model download timeouts
  - Add 10min timeout for model downloads (MACHINE_LEARNING_REQUEST_TIMEOUT=600)
  - Add 4GB memory limit to prevent OOM during model loading
  - Mount model-cache volume for persistent model storage
  - Add health check and proper logging

Impact: Restores dev deployment pipeline and mobile photo backup functionality
 2026-04-06 00:50:00 +08:00
Gan, Jimmy 9e85410340 fix: stabilize Immich mobile sync with timeout and ML fixes 
- Add 10m read/write timeouts to Caddy reverse proxy for photos domains
- Fix ML service URL to use correct docker network hostname
- Resolves 'Request aborted' errors during mobile photo uploads
 2026-04-05 20:46:04 +08:00
Gan, Jimmy b8406c1252 fix: explicitly disable ML URL to prevent OCR job failures 2026-03-16 00:07:26 +08:00
Gan, Jimmy 512c8653a1 fix: remove ffmpeg thread limit causing SIGSEGV in Immich 2026-03-15 23:45:08 +08:00
Gan, Jimmy 9929567679 fix: bind Immich to 0.0.0.0 to allow Tailscale access 2026-03-15 00:29:45 +08:00
Gan, Jimmy d0078f7e9d fix: update Immich healthcheck to use curl and limit ffmpeg threads 2026-03-15 00:22:05 +08:00
Gan, Jimmy 62856c9343 fix: comprehensive dark mode support across all pages
Deploy Dashboard (Dev) / deploy-dev (push) Successful in 1m11s
Details 
- Fix body/html dark background to surface-950
- Add dark scrollbar styling
- Fix App.svelte wrapper to use Tailwind dark: classes instead of conditional strings
- Add dark:bg-surface-800 and dark:border-surface-700 to all cards in Dashboard, Docker, Files, Gitea
- Add dark text variants for headings, labels, and content text
- Add dark hover states for interactive elements
- Enable cross-category sidebar drag-and-drop
 2026-03-01 14:59:23 +08:00
Gan, Jimmy 4b32929dcc feat: watchtower tracking, dev environment, security logs page
Deploy Dashboard (Dev) / deploy-dev (push) Successful in 1m54s
Details 
- watchtower: docker-compose with label filtering, email notifications
- watchtower labels on navidrome, openclaw, immich services
- dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow
- dev.nas.jimmygan.com Caddy site block with Authelia forward_auth
- security page: backend router parsing Authelia/Caddy container logs
- security page: frontend with stats cards, timeline, top IPs, event log
- wired security route into App.svelte and Sidebar
 2026-03-01 00:40:14 +08:00
Gan, Jimmy cdd364e645 security: bind service ports to localhost only 
Bind navidrome, n8n, immich, openclaw, gitea web ports to 127.0.0.1
to prevent direct LAN access bypassing Caddy/Authelia.

Tailscale userspace networking on Synology proxies through localhost,
so VPS Caddy access via Tailscale IP continues to work.

Gitea SSH port (2222) remains on all interfaces for external git push.
 2026-02-28 22:47:36 +08:00
Gan, Jimmy 64ecd99dc7 Add OpenClaw, backup automation, health checks, Telegram notifications 
Phase 6: OpenClaw docker-compose (port 3100) with health check
Phase 9: Enhanced backup.sh with full DB/config coverage + Telegram alerts
Phase 10: Health checks on all compose files, /api/system/notify endpoint
 2026-02-19 21:40:34 +08:00
Gan, Jimmy bf49e13e56 Add settings page with change password, fix terminal ws bug
Deploy Dashboard / deploy (push) Failing after 2m5s
Details
2026-02-19 17:29:03 +08:00