Philosophy: don't tinker, just works. The House Health dashboard now gives one live view of the NAS, Homebridge, Tailscale access, spa, laptop links, Pet Rescue, and Travel Mode. The LAN is intentionally treated as an untrusted IoT fabric; important machines rely on Tailscale. Anti-Google doctrine: HomeKit/Matter > local > Apple/Amazon cloud > Google last. Moen/Flo alerts itself by call/text/email and is intentionally outside Aria monitoring.
Active Items
Synced from the Kanban boardWaiting on You
(3)Homebridge 2 production UAT
⚡ HIGHProduction upgraded July 16 and validated at /info/homebridge2-canary-uat. Runtime 2.1.1 / Node 24; 7/7 integrations pass after clean restart; all Apple pairing records preserved. Await Topher's Apple Home physical UAT. Full backup + prior image retained for rollback.
Home automation — Aria as orchestrator
Homey Pro Bridge on M3 + HomeKit. Caution: M3 future unsettled — this pre-commits its uptime SLO; decide deliberately.
OpenClaw cleanup + archive
7 dirs on M4 + 1 on M3 → private GitHub archive.
Done
(5)Homebridge integration cleanup
⚡ HIGHNest, Tuya, and the unused Google Smart Home bridge retired; Google speakers remain native in Google Home. Ring reauthenticated. Dummy retained for three SmartSlydr/back-door automation switches. SmartSlydr 0.4.0 uses Open/Close + 50% Half Open controls; spa proxy verified. Production now runs Homebridge 2.1.1.
House Health dashboard + Travel Mode + Pet Rescue
⚡ HIGHLive snapshot page at /info/house-health. Refreshed by all four daily Aria jobs; manual travel checks persist locally.
Eero DNS → AdGuard cutover
Eero points to NAS AdGuard; secondary external resolver retained.
LAN trust model accepted
Treat the home LAN as untrusted IoT; important machines use Tailscale. Weak household Wi-Fi and Skillens kids-computer credentials are accepted risk, not recurring cleanup.
Security hardening sprint
⚡ HIGHFirewall + stealth, SSH Tailscale-only, 12 tokens to Keychain. CF audit closed.
Platforms & Tools
House Health
Open ↗Live readiness, Pet Rescue, and interactive Travel Mode checklist
AdGuard Home
Open ↗Network DNS ad-blocker. Allowlist playbook: memory/tools/adguard-allowlist-playbook.md (UserZoom, GA, Jivo un-blocked so far).
Homebridge
Open ↗Bridges non-HomeKit devices into Apple Home. Nest retired July 15 after Aqara thermostat installation.
Homebridge 2 Production UAT
Open ↗Production upgraded to Homebridge 2.1.1 / Node 24. Existing identities, pairings, and caches preserved; 7/7 integrations pass after a clean restart.
Gitea
Open ↗14 repos mirrored from GitHub hourly
Flo by Moen
Smart water monitor + auto-shutoff. Native call/text/email alerts are authoritative; Aria does not duplicate them. July 5 event resolved.
Recent Events & Decisions
Homebridge 2 promoted to production
Upgraded the live NAS container from Homebridge 1.11.2 to 2.1.1 / Node 24 after a full volume backup. Preserved all bridge usernames, ports, pairing records, and accessory caches. Garage, spa, Kasa, Dummy, Ring, Flo, and SmartSlydr passed after a clean Docker restart; UI is healthy with zero container restarts. The Aladdin scoped-identifier patch now reapplies at startup. Canary stopped. Awaiting Topher's Apple Home physical UAT; rollback backup is homebridge-pre-v2-20260716-175654.tgz.
Homebridge 2 canary ready for UAT
Built an isolated Homebridge 2.1.1 / Node 24 canary with its own volume, UI, identities, ports, and cache. HAP disabled on main + all six child bridges; no Apple Home advertisement or physical actuation. Garage, spa, Kasa, Dummy, Ring, Flo, and SmartSlydr all pass. Patched Aladdin 4.3.2's retired unscoped plugin identifier for v2 compatibility. UAT scorecard: /info/homebridge2-canary-uat.
SmartSlydr Apple Home controls simplified
Deployed homebridge-lychee-smartslydr 0.4.0. Replaced the noisy 0–100% live control with a watch-friendly Open/Close garage-door control plus a momentary 50% Half Open button. Pet Pass and sensors remain. Public/live API inspection confirms Google/voice authorization is not exposed; discovering that write requires a captured app request, not a guessed command.
Homebridge cleanup complete — Nest, Tuya, and Google bridge retired
Removed Nest after the Aqara thermostat replacement, Tuya after repeated vendor OTP failures, and the Google Smart Home bridge because Google speakers/devices stay native in Google Home. Ring is live. Kept and pinned Homebridge Dummy: its Back Door Open, Back Door close, and Dog Door switches support the SmartSlydr/back-door automations. Homebridge 1.11.2 and all remaining integrations verified healthy.
Moen Flo main valve event — resolved
Valve fired at 8:39 PM on a 67-min / ~200-gal abnormal draw. Topher confirmed resolved July 15. Native Moen notifications remain the only alert path; Aria does not carry or duplicate them.
Nest thermostat retired; Aqara thermostat installed
Removed the Nest platform and plugin from Homebridge. Aqara is now the thermostat source of truth, including Travel Mode confirmation.
AdGuard: Jivo support chat un-blocked
Third allowlist entry via the playbook pattern.
Spa resilience proxy shipped (OPS-109)
Build guide at /info/spa-resilience-2026-06-06.
NAS audit complete + backups re-enabled
Disk-space incident resolved 4/15; daily 3 AM backups confirmed.
Memory Files (source of truth)
The markdown files Aria reads for deeper contextmemory/drawers/smart-home/camera-inventory.md Per-model count, capabilities (RTSP/SMB push/HKSV), and constraints for the 11-camera Aqara fleet — confirmed 2026-05-27
memory/drawers/smart-home/feedback_moen_notifications_are_self_serving.md memory/drawers/smart-home/feedback_no_guessing.md Never guess at system config — always read official docs first
memory/drawers/smart-home/feedback_no_parroting_uncertain_facts.md If a memory entry is tagged "possibly" or similar, either verify before surfacing or explicitly flag the uncertainty when mentioning it
memory/drawers/smart-home/feedback_pages_dev_exposure.md CF Pages preview URLs bypass custom-domain Access policies — always check before deploying or sharing URLs
memory/drawers/smart-home/ideas-backlog.md Parked ideas for what to do next now that Aria has JIT SSH access to MBA + MBP. Surfaced 2026-05-27 during OPS-81 wrap-up; Topher said "amazing ideas, log them for later."
memory/drawers/smart-home/infrastructure-security.md Network and machine security hardening — status as of 2026-04-15, from Linq's sprint
memory/drawers/smart-home/inventory.md Beyond the NAS audit and camera inventory — full device map, network anchors, HVAC, voice-assistant stance, and the actual use cases driving the smart home design. Captured 2026-05-27 in a context dump from Topher.
memory/drawers/smart-home/m3-orchestration.md Operating manual for Hermes on the M3 — architecture, job roster, doctrine for adding/retiring jobs. Aria is the lead. Established 2026-05-17.
memory/drawers/smart-home/overview.md Smart home setup — philosophy is "just works", predictive automation goal
memory/drawers/smart-home/project_cf_audit_2026-04-16.md Full CF account audit run with Global API Key. Findings on Access apps, Pages projects, Workers, zones, and exposure risks.
memory/drawers/smart-home/project_nas_audit.md Full NAS audit results, Docker containers, SSH access, Tailscale — completed 2026-04-16
memory/drawers/smart-home/skillens-house-management.md Standing support record for the SKILLEN FAMILY's tech (separate household, not the Ottens') — starts with the donated iMac. Recurring remote-support relationship.