Launchpad
Routes + toolsThe tools you actually operate stay up front. User-facing shortcuts are still available, but this deck is optimized for admin work.
ITSZ.STUDIO PORTAL
Watch, request, and keep everything in one place.
Open Emby, request movies and shows, check what you have asked for, and get to the household tools your account is allowed to use.
Portal
Loading your home base...
Checking session...
Finish bootstrap hardening
Admin actionThe portal is still using the initial bootstrap admin account. Create a second admin, test it, then rotate or disable the bootstrap account from the Admin tab.
Sign in to ITSZ Portal
Emby + requestsStreaming starts here
Use your portal account to open Emby, request new media, and see the tools available to you. Admin controls only appear for admin accounts.
01
Watch in Emby
Jump into the media library from the same place every time.
02
Request media
Ask for movies, shows, music, and books without needing the admin tools.
03
Your access follows you
The portal shows only the apps and request options enabled for your account.
Finish Account Setup
Secure linkSet your username and password to finish setup.
Change Password
RequiredYour account is set to change password at next login. Use at least 8 characters with uppercase, lowercase, number, and special character.
ITSZ
Command Deck
Quick Routes
Daily useCommon tasks are broken out here so you can jump straight into mail, media, requests, or automation without rereading endpoint notes.
Ops
Mailbox + Control Center
Mailbox shows live tagging and review. Control Center stays focused on stack health.
Security
Wazuh SIEM
Open the Unraid-hosted Wazuh dashboard for endpoint monitoring and alerts.
Open Wazuh
Keep the proxy paths
`/thunderbird/`, `/emby/`, `/n8n/`, and `/webtop/` are the stable front-door URLs now. (`/mail/` redirects to Thunderbird.)
Use isolated ports only when needed
Dedicated ports are still there for the few tools that need them, but the portal paths are the canonical routes.
Emby Access Guide
This page is just the household handoff. Use it to get Emby onto TVs, phones, tablets, or a browser without digging through server tools.
TV Apps
Roku, Fire TV, Apple TV, Android TV, LG, Samsung
Install the Emby app from your device store, then set the server to
https://itsz.studio/emby/. If the app shows a port field, clear it and leave it empty.
Phone + Tablet
iPhone, iPad, Android
Install Emby, sign in, and use the same server URL. If the app asks for a manual address, use the full HTTPS route. If a port is present, clear it and leave it empty.
Browser Playback
Use the website directly
If an app is not handy, open
https://itsz.studio/emby/ in any browser and sign in there.
Need Something Added?
Use Requests
If your account has media request access, use the Requests tab to ask for a movie, show, artist, or book.
Search Media
Request flowRecent Queue
RecentManual Torrent Intake Admin tool for hand-picked magnets or `.torrent` files. Closed by default so normal requests stay clean. Admin only Intake
Use an existing movie or show from Arr, then attach your own magnet link, torrent URL, or uploaded `.torrent` file. The portal will send it to qBittorrent with the right category and target path.
Selected target
None selected.
Admin-only manual intake path for hand-picked torrents.
Search Results
Select onePhysical notebook engine
Notebook Goblin
Daily prompts, photo dares, tiny games, streak tracking, and reminder nudges for the paper notebook.
Today’s prompt
Loading prompt...
The notebook goblin is finding a clean pen.
Prompts are designed for one line, one tiny page, or a small notebook game.
Mailbox Automation
Live tagging progress, learned suggestions, and mailbox automation coverage without opening n8n.
This view tracks the Proton Bridge mailbox worker that learns patterns, scans new mail, runs historical sweeps across the neutral folders, and now suggests important or calendar-worthy mail.
Mailbox Automations
Enable schedules here, or use Run Now to trigger the worker immediately.
Mailbox flow controls are kept in a focused overlay so this page stays readable while scans, review queues, and reports stay up front.
Loading mailbox readout...
Mailbox Focus
What this page is for
Mail route
Use Thunderbird on the stable portal path. `/mail/` remains as an alias that redirects to Thunderbird.
Address Book
Browse and enrich contacts from mail-derived signals without exposing a webmail address book.
Review queue
Use the pending-review and suggested-attention cards on the left to teach the worker what matters, then let it bias future runs.
Control Center
Jump into the wider systems view for credentials, logs, Docker state, and the rest of the stack.
Mail Ops
Mailbox Automations
Enable schedules here, or use Run Now to trigger the Proton Bridge worker immediately.
Loading mailbox automations...
Address Book
Search, enrich, and maintain contact details pulled from mail. Updates land back in the worker profile for future tagging and summaries.
0 shown
Loading contacts...
Live Stack Snapshot
A compact readout of the server, automation, and mailbox state before you drill into the details.
Loading snapshot...
Storage Overview
Keep array pressure, cache use, and library growth visible without leaving the page.
Loading storage info...
Watchtower
Update status and scan health for the live stack.
Auto-Update
Loading Watchtower status...
Live Systems
Filter by health, sort by what needs attention, and inspect one system at a time from the side panel.
Loading...
0 shown
Loading systems...
Control Center
Automations
Enable or pause repeatable jobs here. Use Run Now for one-off execution, then read the latest output from Reports instead of hunting through n8n.
Loading automations...
Action1
Endpoint patch + vulnerability readout from Action1 (OAuth2 API credentials).
Loading
Open Console
Loading Action1 status...
Organizations
Totals and patch pressure per org. Click refresh after adding endpoints or changing policies.
Loading organizations...
Endpoints Needing Attention
Offline, reboot pending, update warnings, vulnerability scan errors, and missing updates.
Loading endpoints...
Automations
Toggle Action1 flows on/off and run them manually. Output is stored in the portal reports panel.
Patch automation controls open in a focused overlay so endpoint readouts stay clean.
Setup
Credentials are stored in the portal secrets file on the server. They are never shown back once saved.
Patch Ops
Action1 Automations
Toggle Action1 flows on or off and run controlled patch/readout jobs manually.
Loading automations...
Portal Hunt Automation
This replaces the useful part of Huntarr with portal-native control, readouts, and limits so backlog hunting is visible and adjustable from the site.
Use small batches and hourly caps so Sonarr and Radarr keep probing the backlog without flooding indexers or creating duplicate low-quality grabs.
Loading hunt readout...
Service Hunt Settings
Each service keeps its own state window, hourly cap, and cadence. Save changes here, then use Run Now if you want an immediate pass.
Loading service settings...
The Claw
The Claw is not configured yet.
AM Todoist Manager
AM Todoist Manager is not configured yet.
qBittorrent
❖
Welcome to #chat
This is the start of the shared channel. Ask The Claw anything — all conversations are saved.
The Claw is thinking…
Chat settings
Personal controls and admin channel setup live here now.
Your color
Online now — 0
Channel setup
Create rooms, pick which bot shows up, and decide who can see them.
Request Snapshot
A quick read on recent demand before you drop into the full queue history.
Loading request summary...
Request Activity
Latest request actions across the portal, newest first.
Security Summary
Last 24hLoading...
Admin Audit Log
Logins + changesPortal login attempts, user changes, favorites updates, desktop handoff edits, and request actions are recorded here.
Create User
Admin onlyManage Users
Enable / role / Emby preset / resetLoading password reset activity...
Tokens & Secrets
LoadingSecrets are stored server-side. They are never displayed back to you. Enter a value to replace it, or use "Clear" to remove the stored value.
CardDAV (Address Book)
Syncs the portal address book into Thunderbird automatically.
Watchtower
Used for update checks and container health reporting (Bearer token only).
Action1
Update credentials here, then use the Action1 tab for endpoint health and reports.
Embedded Apps
Server-hostedDesktop handoff is retired. The live portal stack runs on Unraid containers. Rotate or review any app secrets in Control Center credentials (not in repo files).
Emby Auto Tagging
Movies + showsAuto-tag Emby movies and TV shows so blocked-content users can be filtered by tag. The default rule set starts with drag-related content, and you can expand it with your own categories.
Automation
No Emby auto-tag apply has been recorded yet.
Run Preview Scan to see which items would gain or lose tags.
Resolve a title
Use this to confirm the system can identify the title you mean before you rely on blocking or future automation against it.
Rule Set
Save rules, preview the scan, then apply tags when the results look right.