mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-07-26 11:49:16 +00:00
a1804c8fbe
* docs: comprehensive review and refresh of all documentation pages Reviewed every doc page against the current app state after the v0.38 dashboard redesign. Updated content, fixed inaccuracies, and refreshed all screenshots at 1920x1080. Pages updated: - introduction: expanded feature list to 25 items across 6 subsections - quickstart: fixed docker run command (Docker Hub, auto JWT, COMPOSE_DIR) - configuration: replaced personal paths with generic /home/user/docker - sso-quickstart: fixed Settings navigation reference - sso: added SSO_LDAP_DISPLAY_NAME env var - overview: added 8 missing feature sections (labels, API tokens, schedules, etc.) - dashboard: complete rewrite for new health bar, gauges, stack health table - stack-management: updated for UP/DN indicators, rollback button, split actions - editor: rewritten for two-column layout, inline stats, embedded terminal - resources: updated Quick Clean docs, added network topology and inspect - app-store: updated categories, deploy sheet details, permission gate, settings - openapi.yaml: fixed YAML parsing error on line 1831 Screenshots refreshed: 14 images across 6 feature areas. * docs: review and update observability, console, multi-node, and compatibility pages - Global Observability: fix log format fields, add download button docs, split display limits into memory buffer vs rendered rows, correct settings labels - Host Console: remove internal implementation details per security docs policy, add stack directory behavior, expand header bar docs, remove unverified scrollback claim - Multi-Node: add Compose Directory field, document connection test details panel, fix edit/delete node behavior, simplify token security section, remove internal details - Node Compatibility: add missing self-update capability, remove internal endpoint paths and cache TTL, move from Features to Reference group in navigation - Refresh all screenshots for the redesigned UI (7 images) * docs: review and refresh fleet, remote updates, labels, alerts, routing, and webhooks pages - Fleet View: added node updates modal, container detail, version/update/critical badges, Tags filter - Remote Updates: removed internal details, added capability cross-link, fast polling - Stack Labels: three creation methods, two assignment methods, 10 colors, bulk actions screenshot - Alerts & Notifications: fixed metric labels, added notification popover detail, status banner - Notification Routing: HTTPS requirement, rule card layout, channel terminology fix - Webhooks: corrected license tier to Admiral, matched action labels to UI, removed internal security details, added local-only note - Troubleshooting: centralized entries from remote-updates, stack-labels, notification-routing - Refreshed all screenshots at 1920x1080, removed 11 orphaned images * docs: review and refresh RBAC, user management, and atomic deployments pages - RBAC: added missing Auditor role (5th role), updated permission matrix, fixed license tier references, documented username/password validation rules, self-deletion protection - Atomic Deployments: added "Which operations are protected" section covering webhooks/schedules/app store, removed internal backup path, fixed license tier to Skipper/Admiral - Screenshots: cropped to dialog element per updated strategic cropping guideline, removed 2 orphaned images * docs: review and refresh fleet-wide backups and audit log pages Update fleet-backups page to reflect current inline create form, add scheduled snapshots section, document the detail view and restore dialog, expand RBAC table to all five roles. Update audit log page to document expanded row detail fields, pagination, refresh button, and data retention screenshot. Replace all screenshots with fresh captures at 1920x720. * docs: review and refresh API tokens and private registries pages - API Tokens: clarify Full Admin scope, add Managing tokens section with card details, document revocation confirmation dialog, add usage tracking to security model, refresh screenshot - Private Registries: add Managing registries section with card details and action buttons, document edit behavior, fix URL auto-fill description, remove encryption algorithm name per security policy, fix grammar, refresh both screenshots * docs: review and refresh auto-update policies, scheduled operations, and SSO pages - Auto-Update Policies: document all 8 table columns, expand action buttons, add "All Stacks" wildcard option, fix field labels, add CSV export and pagination details, refresh screenshots - Scheduled Operations: fix System Prune target description, add Task List table columns, restructure create dialog fields with action-specific annotations, rewrite execution history with column table, refresh screenshots - SSO: remove encryption algorithm name per security policy, add LDAP and OIDC configuration field tables, document provider card controls (Save, Test Connection, Remove, Active badge), refresh screenshots - Move SSO troubleshooting entries to centralized troubleshooting page * docs: review and refresh licensing & billing page Update upgrade card feature lists to match actual tier gating (Skipper: fleet view, webhooks, labels, atomic deployments, backups, auto-update policies; Admiral: scoped RBAC, SSO, audit log, host console, API tokens, private registries, scheduled operations). Add flex layout to align upgrade card buttons at the bottom. Replace stale screenshot with fresh community and active license captures. Add feature breakdown subsection and profile menu billing shortcut to docs. * docs: review and refresh settings reference and security advisories pages Settings Reference: add 5 missing sections (SSO, API Tokens, Registries, Labels, Routing), expand Users from 2 to 5 roles, fix System Limits and Developer field labels to match UI, restructure Developer into Streaming and Data Retention sub-tables, update App Store and Support sections, refresh overview screenshot. Security Advisories: restructure into versioned sections (v0.25.x hardening and v0.19-v0.24 CVE remediation), expand from 3 bullet points to 10 specific improvements, fix GitHub URL from SaelixCode to AnsoCode, redact internal details per security docs policy. Remove "Sencho Pro" product name from all three pages, replaced with tier names (Community, Skipper, Admiral). * docs: review and refresh troubleshooting page, remove architecture and development guides - Rewrote forgotten password section to remove exposed SQL and table names - Updated all Settings navigation paths to Profile > Settings > X - Fixed network topology from "tab" to "view mode", added Pro license note - Updated Prune Networks to current "Prune Dead Networks" label - Corrected update check cooldown from vague to 2 minutes - Consolidated two network creation error sections into one - Removed hardcoded version reference (v0.34.0) - Replaced em dashes throughout - Deleted architecture.mdx (exposes internal implementation details) - Deleted development.mdx (contributor guide belongs in repo, not public docs) - Removed both pages from docs.json navigation * docs: review and refresh operations pages (backup, upgrade, self-hosting, troubleshooting) Backup & Restore: - Added missing encryption.key to all backup/restore procedures - Added Warning about restoring db without matching encryption key - Added cross-reference to Fleet-Wide Backups for paid tiers - Removed false claim about no built-in backup scheduler - Updated cron example to include encryption key copy Upgrading Sencho: - Removed internal migration details (table names, column specs, encryption algorithm) - Replaced with high-level migration summary per security docs policy - Added encryption.key to pre-upgrade backup command - Updated version pinning example from 0.25.3 to 0.38.0 - Added Remote Updates cross-reference for Skipper/Admiral users Self-Hosting Best Practices: - Removed JWT_SECRET from env var table (auto-generated, not an env var) - Removed PORT from env var table (hardcoded to 3000, not configurable) - Added API_RATE_LIMIT to env var table (actually exists in code) - Fixed listen port description from "configurable" to "fixed" - Updated resource recommendations based on measured footprint audit - Removed su-exec reference (internal implementation detail) - Upgraded data directory Note to Warning with file names Troubleshooting: - Fixed "Pro features" heading to "Paid features" with correct tier names
313 lines
10 KiB
Plaintext
313 lines
10 KiB
Plaintext
---
|
|
title: Settings Reference
|
|
description: Complete reference for every option in the Sencho Settings Hub.
|
|
---
|
|
|
|
Open the Settings Hub by clicking the **Profile** icon in the top bar and selecting **Settings**. The left sidebar lists all available sections. Some sections show a lock icon when they require a higher license tier.
|
|
|
|
<Frame>
|
|
<img src="/images/settings/settings-overview.png" alt="Settings Hub showing the Account tab and the full section sidebar" />
|
|
</Frame>
|
|
|
|
---
|
|
|
|
## Account
|
|
|
|
**Scope:** Global (applies to this Sencho instance, not per-node)
|
|
|
|
Change the admin account password. All three fields are required.
|
|
|
|
| Field | Description |
|
|
|-------|-------------|
|
|
| **Current Password** | Your existing password for verification |
|
|
| **New Password** | Must be at least 6 characters |
|
|
| **Confirm New Password** | Must match New Password |
|
|
|
|
Click **Update Password** to apply. The change takes effect immediately; existing sessions remain valid.
|
|
|
|
---
|
|
|
|
## License
|
|
|
|
**Scope:** Global
|
|
|
|
Manage your Sencho license and subscription from this section.
|
|
|
|
| Element | Description |
|
|
|---------|-------------|
|
|
| **Current tier** | Shows your current tier (Community, Skipper, or Admiral) with a tier badge |
|
|
| **Trial status** | If on a trial, shows remaining days |
|
|
| **Renews** | Next renewal date for active subscriptions |
|
|
| **Upgrade cards** | Dynamic plan cards with feature highlights and checkout links. Community users see Skipper and Admiral; Skipper users see Admiral only |
|
|
| **Activate** | Enter a license key to activate your plan (visible when no license is active) |
|
|
| **Manage Subscription** | Opens the Lemon Squeezy billing portal (Skipper / Admiral only) |
|
|
| **Deactivate License** | Reverts to Community features (Skipper / Admiral only) |
|
|
|
|
See [Licensing & Billing](/features/licensing) for the full walkthrough.
|
|
|
|
---
|
|
|
|
## Users
|
|
|
|
<Note>
|
|
User management requires a Sencho Skipper or Admiral license and admin role. Community supports a single admin account only.
|
|
</Note>
|
|
|
|
**Scope:** Global
|
|
|
|
Create and manage user accounts with role-based access.
|
|
|
|
| Action | Description |
|
|
|--------|-------------|
|
|
| **Create user** | Add a new account with username, password, and role |
|
|
| **Edit user** | Change an existing user's password or role |
|
|
| **Delete user** | Remove a user account (you cannot delete your own account) |
|
|
|
|
**Available roles:**
|
|
|
|
| Role | Tier | Description |
|
|
|------|------|-------------|
|
|
| **Admin** | Skipper+ | Full access to all features |
|
|
| **Viewer** | Skipper+ | Read-only access to stacks and nodes |
|
|
| **Deployer** | Admiral | Can view stacks and trigger deployments |
|
|
| **Node Admin** | Admiral | Full stack and node management, no system settings |
|
|
| **Auditor** | Admiral | Read-only plus audit log access |
|
|
|
|
See [RBAC & User Management](/features/rbac) for details on what each role can access.
|
|
|
|
---
|
|
|
|
## SSO
|
|
|
|
<Note>
|
|
SSO requires a Sencho Admiral license.
|
|
</Note>
|
|
|
|
**Scope:** Global
|
|
|
|
Configure Single Sign-On providers (LDAP/AD and OIDC) for centralized authentication. Each provider type has its own configuration card with connection fields, a test button, and an active toggle.
|
|
|
|
See [SSO](/features/sso) for the full configuration walkthrough.
|
|
|
|
---
|
|
|
|
## API Tokens
|
|
|
|
<Note>
|
|
API Tokens require a Sencho Admiral license.
|
|
</Note>
|
|
|
|
**Scope:** Global
|
|
|
|
Create and manage long-lived API tokens for external integrations and automation. Tokens can be scoped to specific permissions.
|
|
|
|
See [API Tokens](/features/api-tokens) for the full walkthrough.
|
|
|
|
---
|
|
|
|
## Registries
|
|
|
|
<Note>
|
|
Private Registries require a Sencho Admiral license.
|
|
</Note>
|
|
|
|
**Scope:** Global
|
|
|
|
Configure private Docker registries so Sencho can pull images that require authentication.
|
|
|
|
See [Private Registries](/features/private-registries) for the full walkthrough.
|
|
|
|
---
|
|
|
|
## Labels
|
|
|
|
<Note>
|
|
Stack Labels require a Sencho Skipper or Admiral license.
|
|
</Note>
|
|
|
|
**Scope:** Global
|
|
|
|
Create, edit, and delete labels used to organize and filter stacks across your fleet. Each label has a name and one of ten available colors.
|
|
|
|
See [Stack Labels](/features/stack-labels) for the full walkthrough.
|
|
|
|
---
|
|
|
|
## System Limits
|
|
|
|
**Scope:** Per-node (applies to the currently selected node)
|
|
|
|
Configure resource thresholds that trigger visual warnings on the dashboard stat cards. These are display thresholds only; Sencho does not throttle or kill containers when limits are reached. When viewing a remote node, a badge shows which node you are configuring.
|
|
|
|
| Setting | Default | Description |
|
|
|---------|---------|-------------|
|
|
| **Host CPU Alert Threshold** | 90% | CPU percentage above which the CPU card turns orange/red |
|
|
| **Host RAM Alert Threshold** | 90% | RAM percentage above which the RAM card turns orange/red |
|
|
| **Host Disk Alert Threshold** | 90% | Disk percentage above which the Disk card turns orange/red |
|
|
| **Docker Janitor Storage Threshold** | 5 GB | Alert when unused Docker data (reclaimable via prune) exceeds this size. Set to `0` to disable. |
|
|
| **Global Crash Detection** | On | Watch all containers for unexpected exits. When enabled, Sencho sends a notification whenever any managed container exits unexpectedly. |
|
|
|
|
Click **Save Limits** to apply.
|
|
|
|
---
|
|
|
|
## Notifications
|
|
|
|
**Scope:** Per-node (each node has its own notification agents; remote nodes dispatch alerts through their own channels)
|
|
|
|
Configure external destinations for alert notifications. Three agent types are available on separate tabs: **Discord**, **Slack**, and **Webhook**.
|
|
|
|
For each agent:
|
|
|
|
| Field | Description |
|
|
|-------|-------------|
|
|
| **Enable toggle** | Activates or deactivates this agent. Disabled agents receive no messages even if a URL is saved. |
|
|
| **Webhook URL** | The endpoint Sencho will POST to when an alert fires |
|
|
|
|
Click **Save** to persist changes. Click **Test** to send a test payload immediately and verify delivery.
|
|
|
|
At least one agent must be enabled for stack alerts to deliver notifications. See [Alerts & Notifications](/features/alerts-notifications) for how to create alert rules.
|
|
|
|
---
|
|
|
|
## Routing
|
|
|
|
<Note>
|
|
Notification Routing requires a Sencho Admiral license.
|
|
</Note>
|
|
|
|
**Scope:** Global
|
|
|
|
Create routing rules that direct specific alert types to specific notification channels. Rules let you send critical alerts to one channel and informational alerts to another.
|
|
|
|
See [Notification Routing](/features/notification-routing) for the full walkthrough.
|
|
|
|
---
|
|
|
|
## Webhooks
|
|
|
|
<Note>
|
|
Webhooks require a Sencho Skipper or Admiral license.
|
|
</Note>
|
|
|
|
**Scope:** Global
|
|
|
|
Create and manage HTTP webhooks that external systems (CI/CD pipelines, automation tools) can call to trigger stack actions. See [Webhooks](/features/webhooks) for the full walkthrough including authentication and CI examples.
|
|
|
|
Quick reference:
|
|
|
|
| Action | How |
|
|
|--------|-----|
|
|
| Create a webhook | Click **Create Webhook**, select a stack and action |
|
|
| Copy trigger URL | Click the copy icon on any webhook row |
|
|
| View execution history | Expand a webhook row to see recent executions |
|
|
| Delete a webhook | Click the trash icon |
|
|
|
|
---
|
|
|
|
## Developer
|
|
|
|
**Scope:** Per-node (streaming and polling settings), Global (data retention)
|
|
|
|
Advanced settings for log streaming behavior and data retention. Most users can leave these at their defaults.
|
|
|
|
### Streaming
|
|
|
|
| Setting | Default | Description |
|
|
|---------|---------|-------------|
|
|
| **Developer Mode** | Off | When on, the [Global Observability](/features/global-observability) view switches from polling to real-time SSE streaming |
|
|
| **Standard Log Polling Rate** | 5s | Polling interval in standard mode. Options: `1s`, `3s`, `5s`, `10s`. Disabled when Developer Mode is on. |
|
|
|
|
### Data Retention
|
|
|
|
| Setting | Default | Max | Description |
|
|
|---------|---------|-----|-------------|
|
|
| **Container Metrics Retention** | 24 hrs | 8,760 (1 year) | How long to keep per-container CPU, RAM, and network history for dashboard charts |
|
|
| **Notification Log Retention** | 30 days | 365 | How long to keep alert and notification history |
|
|
| **Audit Log Retention** | 90 days | 365 | How long to keep audit trail entries (Admiral only) |
|
|
|
|
Click **Save Developer Settings** to apply.
|
|
|
|
<Note>
|
|
Lower polling rates (1s) increase backend CPU usage as Sencho polls Docker more frequently. Use only when actively debugging.
|
|
</Note>
|
|
|
|
---
|
|
|
|
## Nodes
|
|
|
|
**Scope:** Global
|
|
|
|
Manage connections to local and remote Sencho instances. This is the same interface as the [Multi-Node](/features/multi-node) feature; see that page for the full walkthrough.
|
|
|
|
Quick reference:
|
|
|
|
| Action | How |
|
|
|--------|-----|
|
|
| Add a remote node | Click **+ Add Node** |
|
|
| Generate a token for this instance | Click **Generate Token** |
|
|
| Test an existing node's connectivity | Click the wifi icon on any row |
|
|
| Edit a node | Click the pencil icon |
|
|
| Delete a node | Click the trash icon (remote nodes only) |
|
|
|
|
---
|
|
|
|
## App Store
|
|
|
|
**Scope:** Global
|
|
|
|
Configure the template source used by the App Store.
|
|
|
|
| Element | Description |
|
|
|---------|-------------|
|
|
| **Default Registry** | LinuxServer.io (used when no custom URL is set) |
|
|
| **Custom Registry URL** | A URL pointing to a Portainer v2 compatible template JSON file. Overrides the default registry. Leave empty to use the default. |
|
|
| **Reset to Default** | Clears the custom URL and reverts to LinuxServer.io |
|
|
|
|
Click **Save & Refresh** to update the URL and immediately refresh the cached template list.
|
|
|
|
See [App Store](/features/app-store#custom-template-registry) for more on custom registries.
|
|
|
|
---
|
|
|
|
## Support
|
|
|
|
**Scope:** Global
|
|
|
|
Links to help resources, with additional channels for Skipper and Admiral users.
|
|
|
|
### Resources (all tiers)
|
|
|
|
| Resource | Description |
|
|
|----------|-------------|
|
|
| **Documentation** | Opens docs.sencho.io |
|
|
| **GitHub Issues** | Report bugs and request features on GitHub |
|
|
|
|
### Paid tier support
|
|
|
|
Skipper and Admiral license holders see additional support channels:
|
|
|
|
| Channel | Description |
|
|
|---------|-------------|
|
|
| **Email Support** | Direct email support (Skipper) |
|
|
| **Priority Email Support** | Responses within 24 hours (Admiral) |
|
|
|
|
Community users see an upgrade prompt with a link to the pricing page.
|
|
|
|
---
|
|
|
|
## About
|
|
|
|
**Scope:** Global
|
|
|
|
Displays instance information at a glance.
|
|
|
|
| Field | Description |
|
|
|-------|-------------|
|
|
| **Version** | Current Sencho version (e.g. v0.38.0) |
|
|
| **Tier** | Community, Skipper, or Admiral badge |
|
|
| **License Status** | Active, trial, expired, or community |
|
|
| **Instance ID** | Truncated unique identifier for this Sencho instance |
|
|
|
|
The **Links** section contains a link to the full changelog on GitHub.
|