Launchpad
AppsOpen Portal apps and the server tools available to your account.
PRIVATE HOUSEHOLD CLOUD
ITSZ Studio
Media, requests, communications, automation, and server control in one secure workspace.
Portal
Loading your home base...
Checking session...
Finish bootstrap hardening
Admin actionThe portal is still using the initial bootstrap admin account. Create a second admin, test it, then rotate or disable the bootstrap account from the Admin tab.
Sign in to ITSZ Portal
ITSZ Media + requestsStreaming starts here
Use your portal account to open ITSZ Media, request new media, and see the tools available to you. Admin controls only appear for admin accounts.
01
Watch in ITSZ Media
Jump into the media library from the same place every time.
02
Request media
Ask for movies, shows, music, and books without needing the admin tools.
03
Your access follows you
The portal shows only the apps and request options enabled for your account.
04
Android companion
Install the portal shell on Android for the same login, remote controls, and native notification tests.
Finish Account Setup
Secure linkSet your username and password to finish setup.
Change Password
RequiredYour account is set to change password at next login. Use at least 8 characters with uppercase, lowercase, number, and special character.
ITSZ
Command Deck
Home
Media
Ops
Systems
Comms
Workspaces
Jump directly to any module your account can use.
PERSONAL START PAGE
Start
Loading your workspace...
Loading
Quick Routes
Daily useJump straight to daily mail, media, requests, and operations.
Media
/emby/
Browsers use this route. Emby apps use server
Open ITSZ Media
itsz.studio with the Port field left blank.
Ops
Mailbox + Control Center
Mailbox shows live tagging and review. Control Center stays focused on stack health.
Security
Wazuh SIEM
Portal access is checked first; Wazuh then uses its own sign-in for endpoint monitoring and alerts.
Open Wazuh
Keep the proxy paths
`/thunderbird/`, `/emby/`, `/n8n/`, and `/webtop/` are the stable front-door URLs now. (`/mail/` redirects to Thunderbird.)
Use isolated ports only when needed
Dedicated ports are still there for the few tools that need them, but the portal paths are the canonical routes.
ITSZ Media Access Guide
This page is the household handoff for ITSZ Media on TVs, phones, tablets, and browsers without exposing server tools.
TV Apps
Roku, Fire TV, Apple TV, Android TV, LG, Samsung
Install the Emby app from your device store. Use server
itsz.studio. If the app shows a Port field, clear it and leave it empty.
Phone + Tablet
iPhone, iPad, Android
Install Emby, sign in, and use
itsz.studio. If a port is already filled in, delete it and leave the port blank. Browsers can still use the portal route below.
Browser Playback
Use the website directly
If an app is not handy, open
https://itsz.studio/emby/ in any browser and sign in there.
Need Something Added?
Use Requests
If your account has media request access, use the Requests tab to ask for a movie, show, artist, or book.
ITSZ SOFTWARE CATALOG
App Store
Open web apps, download ITSZ software, and check what each app needs.
0Apps
0Downloads
0Standalone
ANDROID APP MANAGER
Checking installed ITSZ apps...
Verified updates use Android's normal installation confirmation.
Standalone works without ITSZ infrastructure
Self-hostable can run on another machine or server
ITSZ server needs ITSZ services or hardware
Loading catalog...
ITSZ Companion
Native Android server dashboard with offline status and authenticated Portal tools when you need them.
Loading app details...
App updates
Checking for updates...
Installed
Checking
Native app version on this device.
Published
Checking
Latest APK listed by the portal manifest.
Mode
native-core-plus-advanced-portal
The dashboard is native; advanced Portal tools update live and native features update with the APK.
Update State
Checking
Comparing app build to portal manifest.
Custom Notifications
Native bridgeAndroid Widgets
Home screen
Widget
ITSZ Portal
Native shortcuts for Portal, Control, Requests, and Chat are included in the APK.
Launch
Deep links
Widget taps open the companion app directly to the matching portal module.
Server Push
LoadingAdmin Push
Server sideRemote Access
Permission based
Users
Invite from Admin
Create users from Admin > Users. Their app login shows only their allowed routes and request tools.
Admins
Control Center
Admins can restart containers, inspect logs, review stack health, and use server workflows from Android.
Install
Sideload APK
Android will ask for unknown-app install approval. Updates can be downloaded here from the same link.
Powered by your Emby history
Personal picks
What should I watch?
Get personal picks already in the library and discover something new to request.
Choose a movie or TV suggestion. Nothing is downloaded unless you approve a request.
Already yours
0
Watch now
Outside your library
0
Request next
Search Media
Request flowRecent Queue
RecentManual Torrent Intake Admin tool for hand-picked magnets or `.torrent` files. Closed by default so normal requests stay clean. Admin only Intake
Use an existing movie or show from Arr, then attach your own magnet link, torrent URL, or uploaded `.torrent` file. The portal will send it to qBittorrent with the right category and target path.
Selected target
None selected.
Admin-only manual intake path for hand-picked torrents.
Search Results
Select oneMailbox Automation
Live tagging progress, learned suggestions, and mailbox automation coverage without opening n8n.
This view tracks the Proton Bridge mailbox worker that learns patterns, scans new mail, runs historical sweeps across the neutral folders, and now suggests important or calendar-worthy mail.
Mailbox Automations
Enable schedules here, or use Run Now to trigger the worker immediately.
Mailbox flow controls are kept in a focused overlay so this page stays readable while scans, review queues, and reports stay up front.
Loading mailbox readout...
Mailbox Focus
What this page is for
Mail route
Use Thunderbird on the stable portal path. `/mail/` remains as an alias that redirects to Thunderbird.
Address Book
Browse and enrich contacts from mail-derived signals without exposing a webmail address book.
Review queue
Use the pending-review and suggested-attention cards on the left to teach the worker what matters, then let it bias future runs.
Control Center
Jump into the wider systems view for credentials, logs, Docker state, and the rest of the stack.
Mail Ops
Mailbox Automations
Enable schedules here, or use Run Now to trigger the Proton Bridge worker immediately.
Loading mailbox automations...
Address Book
Search, enrich, and maintain contact details pulled from mail. Updates land back in the worker profile for future tagging and summaries.
Loading contacts...
Live Stack Snapshot
A compact readout of the server, automation, and mailbox state before you drill into the details.
Loading snapshot...
Storage Overview
Keep array pressure, cache use, and library growth visible without leaving the page.
Loading storage info...
Watchtower
Update status and scan health for the live stack.
Auto-Update
Loading Watchtower status...
Live Systems
Filter by health, sort by what needs attention, and inspect one system at a time from the side panel.
Loading...
0 shown
Loading systems...
Control Center
Automations
Enable or pause repeatable jobs here. Use Run Now for one-off execution, then read the latest output from Reports instead of hunting through n8n.
Loading automations...
Action1
Read-only endpoint patch and vulnerability status from Action1. Changes stay in the external console.
Loading
Open Action1 Console
Loading Action1 status...
Organizations
Totals and patch pressure per org. Click refresh after adding endpoints or changing policies.
Loading organizations...
Endpoints Needing Attention
Offline, reboot pending, update warnings, vulnerability scan errors, and missing updates.
Loading endpoints...
Automations
Schedule or run read-only Action1 sync, audit, and digest jobs. Output is stored in Portal reports.
Read-only reporting jobs open in a focused overlay so endpoint status stays clean.
Setup
Credentials are stored in the portal secrets file on the server. They are never shown back once saved.
Patch Ops
Action1 Automations
Toggle read-only Action1 sync, audit, and digest jobs or run them manually.
Loading automations...
Portal Hunt Automation
This replaces the useful part of Huntarr with portal-native control, readouts, and limits so backlog hunting is visible and adjustable from the site.
Use small batches and hourly caps so Sonarr and Radarr keep probing the backlog without flooding indexers or creating duplicate low-quality grabs.
Loading hunt readout...
Service Hunt Settings
Each service keeps its own state window, hourly cap, and cadence. Save changes here, then use Run Now if you want an immediate pass.
Loading service settings...
The Claw
Administrator workspace for chat, live media queue checks, and server operations. Media-panel actions operate on the live stack.
The Claw is not configured yet.
AM Todoist Manager
AM Todoist Manager is not configured yet.
qBittorrent
❖
Welcome to #chat
This is the start of the shared channel. Ask The Claw anything — all conversations are saved.
The Claw is thinking…
Chat settings
Personal controls and admin channel setup live here now.
Your color
Online now — 0
Channel setup
Create rooms, pick which bot shows up, and decide who can see them.
Waiting for the server bridge.
Local admin bridge only. No internet rebroadcast.
❖
Broadcast
Public LongFast messages and portal transmissions appear here. Select a node to switch this panel to that direct chat.
No mesh messages loaded yet.
Request Snapshot
A quick read on recent demand before you drop into the full queue history.
Live summary
Loading request summary...
Request Activity
Latest request actions across the portal, newest first.
Security Summary
Last 24hLoading...
Admin Audit Log
Logins + changes
Portal login attempts, user changes, favorites updates, desktop handoff edits, and request actions are recorded here.
Portal administration
Access, connections, and policy
Manage people and the services they can use. Credentials stay server-side and are never shown back in forms.
Accounts—
Enabled—
Setup pending—
People and permissions
User management
Create an invite or expand an existing account to change access. Nothing is changed until you use that account’s save action.
Invite a user
New accountExisting users
Access and account statusLoading password reset activity...
Credentials and integrations
Connected services
Update only the connection you intend to rotate. Blank secret fields keep the stored value unless “Clear” is checked.
Server-side credentials
LoadingSecrets are stored server-side. They are never displayed back to you. Enter a value to replace it, or use "Clear" to remove the stored value.
CardDAV (Address Book)
Syncs the portal address book into Thunderbird automatically.
Watchtower
Used for update checks and container health reporting (Bearer token only).
Action1
Update credentials here, then use the Action1 tab for endpoint health and reports.
Companion Firebase
Firebase Cloud Messaging service account for Android companion push notifications.
App hosting
Server-hostedDesktop handoff is retired. The live portal stack runs on Unraid containers. Rotate or review any app secrets in Control Center credentials (not in repo files).
Emby auto tagging
Movies + showsAuto-tag Emby movies and TV shows so blocked-content users can be filtered by tag. The default rule set starts with drag-related content, and you can expand it with your own categories.
Automation
No Emby auto-tag apply has been recorded yet.
Run Preview Scan to see which items would gain or lose tags.
Resolve a title
Use this to confirm the system can identify the title you mean before you rely on blocking or future automation against it.
Rule Set
Save rules, preview the scan, then apply tags when the results look right.