nexxo 15b536f393 Mint the archive collection key from the console instead of by hand ... Setting a NAS up to collect the invoice archive meant three machines and a dozen commands: generate a keypair there, carry the public half to the server, write it into authorized_keys with a restriction, install rsync, and get every path right on the first try. Every one of those steps was a place to be told "permission denied" with no clue which of the three was wrong. It was, and several times over. One button now. The panel asks, the host does it — because the host is where all of it lives: the home directory, ssh-keygen, rrsync, and the archive itself. The panel is www-data in a container and owns none of that, so it uses the mailbox it already uses for updates. The private half is shown exactly once, alongside the finished rsync command, and is never written to the database: it exists to be copied into a NAS, and storing it "for convenience" would put a working credential in every backup of that database. rrsync does the restricting, not a pinned rsync option string. That string differs between rsync versions and fails silently — a refusal with no reason given, which is the shape of the afternoon this replaces. If rrsync is missing the agent refuses rather than issuing an unrestricted key while the panel says it is restricted. rsync now comes with install-agent.sh, which already runs as root once per machine. It has to be on the HOST: a NAS connects by ssh and sshd starts `rsync --server` here, so without it the pull fails with "command not found" from a NAS whose own setup is perfectly correct. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-29 10:08:32 +02:00
..
confirm-delete-datacenter.blade.php	One definition of the navigation, and the country instead of the building	2026-07-27 16:09:39 +02:00
confirm-delete-plan-draft.blade.php	feat(admin): a console for creating, pricing and scheduling plans	2026-07-26 12:41:51 +02:00
confirm-delete-vpn-peer.blade.php	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00
confirm-disable-two-factor.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
confirm-end-other-sessions.blade.php	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
confirm-forget-secret.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
confirm-reissue-vpn-peer.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
confirm-remove-host.blade.php	One definition of the navigation, and the country instead of the building	2026-07-27 16:09:39 +02:00
confirm-save-env.blade.php	Add a raw .env editor to the Integrations page, with a net under it	2026-07-29 01:51:27 +02:00
confirm-save-secret.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
customers.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
datacenters.blade.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
edit-datacenter.blade.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
edit-export-target.blade.php	Let a destination say how it is laid out and how long anything stays	2026-07-29 03:08:27 +02:00
edit-invoice-series.blade.php	Give the console a Finance tab: company details, VAT rate, invoice series	2026-07-29 01:18:43 +02:00
finance.blade.php	Mint the archive collection key from the console instead of by hand	2026-07-29 10:08:32 +02:00
host-create.blade.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
host-detail.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
hosts.blade.php	Read VPN host state from the synced peer table, not a live hub call	2026-07-29 00:18:21 +02:00
instance-admin-access.blade.php	One definition of the navigation, and the country instead of the building	2026-07-27 16:09:39 +02:00
instances.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
integrations.blade.php	Restart the workers automatically after saving .env, instead of handing the operator back to the shell	2026-07-29 02:26:34 +02:00
invoices.blade.php	List issued invoices in the console, with no way to change one	2026-07-29 02:21:15 +02:00
mail.blade.php	Bound the mail test-send and real send to a timeout instead of hanging	2026-07-28 16:36:14 +02:00
maintenance.blade.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
overview.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
plan-versions.blade.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
plans.blade.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
provisioning.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
revenue.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
settings.blade.php	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
two-factor-setup.blade.php	Let a half-finished two-factor enrolment be cancelled, and rework the setup page	2026-07-28 22:25:27 +02:00
vpn-config-access.blade.php	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
vpn.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00