12 Commits

Author	SHA1	Message	Date
Gan, Jimmy	9560de6314	fix: increase Immich ML memory to 6GB and add model TTL config ... - Increase memory limit from 4GB to 6GB for larger model downloads - Add MACHINE_LEARNING_MODEL_TTL=300 to keep models in memory longer - Add MACHINE_LEARNING_MODEL_TTL_POLL_S=10 for faster model unloading checks Note: Models still failing to download due to network timeouts. Uploads work but ML features (OCR, facial recognition) fail.	2026-04-06 00:55:08 +08:00
Gan, Jimmy	50107a94f3	fix: restore dashboard dev CI and Immich mobile uploads ... - Change deploy-dev workflow runner from ubuntu-latest to nas Fixes: CI failing to access /volume1/docker paths - Add missing immich-machine-learning service to compose Fixes: Mobile photo uploads failing due to ML model download timeouts - Add 10min timeout for model downloads (MACHINE_LEARNING_REQUEST_TIMEOUT=600) - Add 4GB memory limit to prevent OOM during model loading - Mount model-cache volume for persistent model storage - Add health check and proper logging Impact: Restores dev deployment pipeline and mobile photo backup functionality	2026-04-06 00:50:00 +08:00
Gan, Jimmy	9e85410340	fix: stabilize Immich mobile sync with timeout and ML fixes ... - Add 10m read/write timeouts to Caddy reverse proxy for photos domains - Fix ML service URL to use correct docker network hostname - Resolves 'Request aborted' errors during mobile photo uploads	2026-04-05 20:46:04 +08:00
Gan, Jimmy	b8406c1252	fix: explicitly disable ML URL to prevent OCR job failures	2026-03-16 00:07:26 +08:00
Gan, Jimmy	512c8653a1	fix: remove ffmpeg thread limit causing SIGSEGV in Immich	2026-03-15 23:45:08 +08:00
Gan, Jimmy	9929567679	fix: bind Immich to 0.0.0.0 to allow Tailscale access	2026-03-15 00:29:45 +08:00
Gan, Jimmy	d0078f7e9d	fix: update Immich healthcheck to use curl and limit ffmpeg threads	2026-03-15 00:22:05 +08:00
Gan, Jimmy	62856c9343	fix: comprehensive dark mode support across all pages ... - Fix body/html dark background to surface-950 - Add dark scrollbar styling - Fix App.svelte wrapper to use Tailwind dark: classes instead of conditional strings - Add dark:bg-surface-800 and dark:border-surface-700 to all cards in Dashboard, Docker, Files, Gitea - Add dark text variants for headings, labels, and content text - Add dark hover states for interactive elements - Enable cross-category sidebar drag-and-drop	2026-03-01 14:59:23 +08:00
Gan, Jimmy	4b32929dcc	feat: watchtower tracking, dev environment, security logs page ... - watchtower: docker-compose with label filtering, email notifications - watchtower labels on navidrome, openclaw, immich services - dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow - dev.nas.jimmygan.com Caddy site block with Authelia forward_auth - security page: backend router parsing Authelia/Caddy container logs - security page: frontend with stats cards, timeline, top IPs, event log - wired security route into App.svelte and Sidebar	2026-03-01 00:40:14 +08:00
Gan, Jimmy	cdd364e645	security: bind service ports to localhost only ... Bind navidrome, n8n, immich, openclaw, gitea web ports to 127.0.0.1 to prevent direct LAN access bypassing Caddy/Authelia. Tailscale userspace networking on Synology proxies through localhost, so VPS Caddy access via Tailscale IP continues to work. Gitea SSH port (2222) remains on all interfaces for external git push.	2026-02-28 22:47:36 +08:00
Gan, Jimmy	64ecd99dc7	Add OpenClaw, backup automation, health checks, Telegram notifications ... Phase 6: OpenClaw docker-compose (port 3100) with health check Phase 9: Enhanced backup.sh with full DB/config coverage + Telegram alerts Phase 10: Health checks on all compose files, /api/system/notify endpoint	2026-02-19 21:40:34 +08:00
Gan, Jimmy	bf49e13e56	Add settings page with change password, fix terminal ws bug	2026-02-19 17:29:03 +08:00