Services Healthy
—
of 8 backends
Active Licenses
—
issued to date
Latest Release
—
from update server
Web Sessions (30d)
—
requires tracking key
🟢 Service Health View all →
Checking backends…
🔔 Recent Activity
Loading feed…
⚡ Quick Actions
⚠️ Alerts
Checking…
Hetzner HEL1
ubuntu-4gb-hel1-2
89.167.94.187 · Helsinki
SSL (auto)
Let's Encrypt
auto-renewed by Caddy
Firewall
UFW + fail2ban
5 jails active
🐳 Docker Containers
| Name | Status | Port | Image |
|---|---|---|---|
| forgejo | Running | 127.0.0.1:2222, :3100 | forgejo:9 |
| nightpay-bridge-proof | Running | 127.0.0.1:6300 | proof-server:4.0 |
| aiprocurement-club | Running | 127.0.0.1:3008 | Next.js |
| masumi-payment-service | Running | 127.0.0.1:3001 | masumi:0.22 |
| masumi-registry-service | Running | 127.0.0.1:3000 | masumi:0.22 |
| aprm_website | Running | 127.0.0.1:5178 | custom |
| taskzilla_tracking | Running | 127.0.0.1:8787 | Flask |
| masumi-postgres (×2) | Running | 127.0.0.1:5432, :5433 | postgres:15 |
🔐 Security Posture
SSH password authDisabled
SSH key-onlyEnforced
fail2ban jails5 active
TLS version1.2 / 1.3 only
Docker ports on 127.0.0.1All
Unattended upgradesActive
Env files mode600
Server headerHidden
All Licenses
Issue New
Lookup / Revoke
License Database ↻ Refresh
Loading licenses…
Issue New License
Tier
Email
Order ID (optional)
Lookup / Revoke
License key
💡 Ticket metrics require a desk browser session — log in there to see the full queue with AI drafts.
🤖 AI Triage Pipeline
Intake→
Classify→
Draft→
Review→
Send
The Support Agent (CrewAI + Gemini on port 3459) auto-categorizes new tickets and drafts responses. Human review happens in the desk UI at desk.taskzilla.ai/tickets.
📦 Latest Releases
Loading…
🔄 Triage Flow
📥 Intake API→
🔍 Auto-categorize→
⚖️ Severity score→
📊 Cluster→
💡 Proposal→
🧑 Human review→
🐙 GitHub issue
Customer TaskZilla instances run tz_logger which detects errors, auto-heals via TROUBLESHOOT.md, and sends what it can't fix to support.taskzilla.ai/api/intake. Reports are clustered monthly; common patterns become proposals for human review.
📋 Automated Actions
Self-heal cronsWeekly (TROUBLESHOOT)
Self-report cronsMonthly
Error scan cadence3× daily
Weekly reportMondays 9:00 AMS
Intake endpointsupport.taskzilla.ai/api/intake
📊 Triage Outcomes
Auto-resolved (local)~99% of errors
Escalated to intake~1% edge cases
Human review ratePattern-based
Avg time to proposal< 72h
Events
—
Sessions
—
CTA clicks
—
CTR
—
📅 Daily Trend
Loading…
🎯 CTA Breakdown
Loading…
✅ Consent
—
📍 Top Paths
—
🧪 Variant Performance
—
✉️ New Email
Type
Audience
Subject
Body (Markdown)
Loading…
fail2ban
Active
5 jails running
Caddy rate limit
200/min
flood jail
Admin probe
3/10min
→ 24h ban
🛡️ Defense Layers
UFW firewallDeny-by-default, 22/80/443 only
SSHKey-only, no password
fail2ban: sshd3 fails / 10min → 1h ban
fail2ban: sshd-aggressive5 fails / 24h → 24h ban
fail2ban: caddy-auth10 × 401/403/405 / 5min → 1h ban
fail2ban: caddy-flood200 req / min → 15min ban
fail2ban: caddy-admin3 × admin probes / 10min → 24h ban
Docker port exposure127.0.0.1 only
Caddy headersHSTS, XFO, nosniff, CSP
🔑 API Tokens
Tokens are stored in browser localStorage only. They never leave the browser except to hit the corresponding backend.
Admin Token (license + ops)
Tracking API Key (marketing)
🔗 API Endpoints (for reference)
License server127.0.0.1:3461
Update server127.0.0.1:3458
Desk127.0.0.1:3460
Support relay127.0.0.1:3457
Onboard relay127.0.0.1:3456
Support agent (CrewAI)127.0.0.1:3459
Tracking (Flask)127.0.0.1:8787