Auth, secrets, and hardening
View All Tags
AES-GCM encrypted integration creds in SQLite, .amud-secrets-key on disk. What gets encrypted and what doesn't.
Read article →Storing X-Plex-Token=abc123 in plain text in a yaml file on disk always felt wrong. Storing it in plain text in SQLite felt equally wrong.
Admin sees power controls. Guest sees links and optional telemetry. Kitchen tablet stays safe.
Read article →Put a dashboard on a kitchen wall tablet. Someone will eventually tap the wrong button.
If your CPU graphs freeze at 0%, your reverse proxy probably isn't forwarding WebSocket upgrades. Fix inside.
Read article →Deployed AMUD Dashboard behind Nginx, opened the page, everything looked fine except the CPU bar was stuck at 0% like the server was dead. Server wasn't dead. Nginx just ate the WebSocket upgrade.
Argon2id passwords, encrypted integration secrets, CSRF, rate limiting — what AMUD Dashboard actually ships with.
Read article →Your dashboard is a map to your entire homelab. Treat it like one.