feat: watchtower, dev environment, security logs, SMTP tunnel #1

2026-03-01T10:10:16+08:00

jimmy commented

2026-03-01 10:10:16 +08:00

Watchtower with SMTP notifications via SSH tunnel
Dev environment (compose, CI, Caddy)
Security logs page (backend + frontend)
Watchtower labels on registry-image services

- Watchtower with SMTP notifications via SSH tunnel - Dev environment (compose, CI, Caddy) - Security logs page (backend + frontend) - Watchtower labels on registry-image services

jimmy added 3 commits 2026-03-01 10:10:17 +08:00

feat: watchtower tracking, dev environment, security logs page

Deploy Dashboard (Dev) / deploy-dev (push) Successful in 1m54s

Details

4b32929dcc

- watchtower: docker-compose with label filtering, email notifications
- watchtower labels on navidrome, openclaw, immich services
- dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow
- dev.nas.jimmygan.com Caddy site block with Authelia forward_auth
- security page: backend router parsing Authelia/Caddy container logs
- security page: frontend with stats cards, timeline, top IPs, event log
- wired security route into App.svelte and Sidebar

fix: route watchtower SMTP through SSH tunnel to bypass GFW 5a95010f35

- Switch to shoutrrr notification URL format
- Use extra_hosts to resolve smtp.gmail.com to local tunnel (192.168.31.222:1587)
- Add URL-encoded SMTP credentials for shoutrrr URL compatibility
- SSH tunnel: NAS:1587 -> server2 -> smtp.gmail.com:587

feat: add watchtower label to docker-socket-proxy

Deploy Dashboard (Dev) / deploy-dev (push) Successful in 33s

Details

abba79aefb

jimmy merged commit 407abd23c1 into main

2026-03-01 10:10:25 +08:00

jimmy referenced this issue from a commit

2026-03-01 10:10:25 +08:00

Merge pull request 'feat: watchtower, dev environment, security logs, SMTP tunnel' (#1) from dev into main

jimmy referenced this issue from a commit

2026-04-08 01:04:53 +08:00

security: fix passkey admin privilege escalation (issue #1)