This machineEvery page
Accounts
The Accounts page says who may sign in — "2 accounts sign in, 1 more is disabled; Anna has no second factor." — then three sections: Sign in to the panel, Open shares only, and People at home. A row opens a drawer with everything about it.
Accounts that sign in
Add an account beside the section's heading. Each account has roles:
| Role | May |
|---|---|
| admin | Everything |
| operator | Run things day to day; not change accounts or roles |
| auditor | Read the audit trail and what is installed |
| household | The household page, and look at Home, Network, NAS, Self-hosted, Activity's Recent and Status |
An account's drawer sets its roles and its password, removes its second factor (for a lost phone), and disables or deletes it.
A second factor
From your own account (your name at the top of the page): scan the QR code with an authenticator app and type the code it shows. Signing in then asks for the code too. From outside, through the relay, signing in needs one.
Too many failed sign-ins lock the account for a while. Panels that share accounts count wrong codes together, and a code used on one is used on all.
Staying signed in
You stay signed in while you use the panel — an open page counts — and are signed out after 12 hours without it. After 30 days you sign in again anyway. The same at home and from outside.
SSH
An administrator also has an SSH login on the machine, under the same name:
- Keys only. Paste your public key into your account's drawer, then
ssh <name>@<machine>. Password logins would skip the second factor. sudoasks for your panel password.- It follows the account. Demoted, disabled or deleted, the Linux login is locked and its sessions end. The home folder is kept.
- Your keys are yours. Another administrator sees them but can't change them.
Anything done over SSH bypasses the panel: its audit trail, and the changes that wait to be kept.
Open shares only
On a machine with the NAS: accounts for a TV, a scanner or a guest, which open the shares they are given and cannot sign in.
People at home
The people of the household. Their devices are given to them on the Network page; the household page then pauses a person, sets their schedule and their daily time.
Several panels
Panels that share accounts have one list: a change on one reaches the others within a second. See Panels.