chore: ignore sqlite WAL sidecars and stray vhs build binaries

uptop.db* now covers the -shm/-wal sidecars; /backfill and /crop catch
binaries left by `go build ./vhs/<tool>` without -o.

.dockerignore

@@ -1,10 +1,15 @@
 .git
-.ssh/
-.gitea/
 tmp/
 vendor/
-*.db
+
-*.db-journal
+# Security: keep sensitive/local files out of Docker build context
+.ssh/
+.claude/
+.github/
+.gitea/
+CLAUDE.md
 *.local.json
 *.local.md
 *.local
+*.db
+*.db-journal

.gitea/workflows/release.yml

@@ -8,13 +8,7 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        shell: sh
     steps:
-      - name: Install build tools
-        run: apk add --no-cache git gcc musl-dev
-
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
@@ -40,10 +34,9 @@ jobs:
         env:
           GORELEASER_FORCE_TOKEN: gitea
           GITEA_TOKEN: ${{ secrets.RELEASE_TOKEN }}
-          GITEA_API_URL: http://gitea:3000/api/v1
 
   docker:
-    runs-on: docker-builder
+    runs-on: ubuntu-latest
     needs: [release]
     steps:
       - uses: actions/checkout@v4

.gitignore

@@ -27,6 +27,10 @@ go.work
 # End of https://www.toptal.com/developers/gitignore/api/go
 
 /uptop
+# stray binaries from `go build ./vhs/<tool>` without -o
+/backfill
+/crop
+# sqlite db + WAL sidecars (-shm/-wal)
 uptop.db*
 
 .ssh

.goreleaser.yaml

@@ -1,12 +1,12 @@
 version: 2
 
 gitea_urls:
-  api: "{{ if index .Env \"GITEA_API_URL\" }}{{ .Env.GITEA_API_URL }}{{ else }}https://gitea.lerkolabs.com/api/v1{{ end }}"
+  api: https://gitea.lerkolabs.com/api/v1
   download: https://gitea.lerkolabs.com
 
 release:
   gitea:
-    owner: lerkolabs
+    owner: lerko
     name: uptop
 
 builds:

CHANGELOG.md

@@ -1,94 +1,46 @@
 # Changelog
 
-## [2026.05.5] — 2026-05-29
+## [2026.05.2] — 2026-05-23
 
 ### Added
-- Error reason display when monitors go DOWN (#33)
+- Comprehensive test suite (94 tests across monitor, server, cluster)
-- Push monitor lifecycle — PENDING, LATE, DOWN states (#34)
+- golangci-lint config with CI enforcement
-- Logs tab overhaul — severity tags, filtering, recovery durations (#35)
+- Gitea Actions CI pipeline (test + lint)
-- Alert channel health indicator and test alerts (#36)
+- Graceful shutdown for HTTP and SSH servers
-- TUI screenshots in `assets/` (#32)
+- Context-aware alert delivery with timeout
-- CI status badge in README
+- Request size limits on all POST endpoints
+- Constant-time secret comparison
+- Check interval jitter to prevent thundering herd
+- `--version` flag with build metadata injection
 
-### Changed
+### Fixed
-- Visual polish — detail sections, column headers, alert detail (#37)
+- Silent JSON unmarshal failures in alert settings
-- README rewritten with hero image, badges, collapsible install sections (#32)
+- Panic on crypto/rand failure replaced with error return
-- Changelog rewritten to match actual CalVer tag history
+- Alert delivery errors now logged instead of swallowed
-- Migrated to `lerkolabs` org namespace (#38)
+- log.Fatalf in goroutines replaced with log.Printf
-- Docker-compose files moved to `deploy/`
+- Deprecated LineUp/LineDown API calls
-
-## [2026.05.4] — 2026-05-27
-
-### Added
-- SSH user seeding from `UPTOP_ADMIN_KEY` env var and `UPTOP_KEYS` file (#31)
-- GoReleaser for binary releases
-- govulncheck in CI pipeline
-- Multi-arch Docker builds (amd64 + arm64)
-
-### Changed
-- CI overhaul — Go 1.26, build caching, streamlined pipeline (#30)
-- Bumped golang.org/x/crypto v0.47.0 → v0.52.0
-- Bumped Alpine 3.21 → 3.23
 
 ### Security
-- Phase 1: SSRF protection, input validation, safe dial (#26)
+- Cluster secret compared with crypto/subtle (timing-safe)
-- Phase 2: TLS hardening, auth bypass fixes, rate limiting (#27)
+- http.MaxBytesReader on all JSON endpoints
-- Phase 3: Graceful degradation, connection limits, timeout enforcement (#28)
+- ReadHeaderTimeout added to HTTP server
-- Phase 4: Code quality, error handling, linter fixes (#29)
 
-## [2026.05.3] — 2026-05-25
+## [2026.05.1] — 2026-05-14
-
-### Added
-- Theme system with 5 dark palettes — Default, Dracula, Nord, Tokyo Night, Gruvbox (#24)
-- `--version` flag with build metadata injection
-- Gitea Actions CI pipeline — test + lint (#20)
-- golangci-lint configuration
-- Comprehensive test suite — 94 tests across monitor, server, cluster (#19)
-- CONTRIBUTING.md and SECURITY.md
-
-### Changed
-- Renamed project from go-upkeep to uptop (#25)
-- Updated LICENSE with dual copyright for independent fork
-
-### Fixed
-- Form validators scoped to relevant monitor types (#23)
-- Graceful shutdown for HTTP, SSH servers and database (#19)
-- Constant-time secret comparison, request size limits (#19)
-- Check interval jitter to prevent thundering herd (#19)
-- TUI visual polish — zebra striping, group icons, sparkline stats (#18)
-
-## [2026.05.2] — 2026-05-22
-
-### Added
-- Incident management and maintenance windows (#17)
-- Production docker-compose.yml
-
-### Fixed
-- Viewport sizing and dynamic chrome calculation (#16)
-- Form height constrained to terminal with resize forwarding
-- Maintenance'd monitors excluded from down count and pulse
-- Group status correctly skips children in maintenance
-
-## [2026.05.1] — 2026-05-16
 
 ### Added
 - Distributed probing with leader + probe nodes
-- Config-as-code — YAML apply/export with dry-run and prune
+- Config-as-code (YAML apply/export with dry-run, prune)
-- TUI polish — status bar, tab badges, detail panel, modals
+- TUI visual polish (zebra striping, sparklines, breadcrumbs)
-- DOWN-first sort, health pulse, site filter
+- Incident management and maintenance windows
-- Type icons in sites table
+- 9 alert providers (Discord, Slack, Email, Ntfy, Telegram, PagerDuty, Pushover, Gotify, Webhook)
-- Sparkline history graphs
-- Persistent state — uptime, status, latency, and logs survive restarts
-- Push token stripping from /status/json response
 
-## [2026.04.1] — 2026-04-01
+## [2026.04.1] — Initial independent fork
 
 ### Added
-- SSH-accessible TUI built on Bubble Tea + Wish
+- SSH-accessible TUI (Bubble Tea + Wish)
-- 6 check types — HTTP, Push, Ping, Port, DNS, Group
+- 6 check types (HTTP, Push, Ping, Port, DNS, Group)
-- 9 alert providers — Discord, Slack, Email, Ntfy, Telegram, PagerDuty, Pushover, Gotify, Webhook
 - SQLite and PostgreSQL support
 - HA clustering with automatic failover
-- Prometheus /metrics endpoint
+- Prometheus metrics endpoint
-- Public status page (HTML + JSON)
+- Public status page
-- Uptime Kuma backup import
+- Uptime Kuma import

README.md

@@ -1,50 +1,19 @@
-<div align="center">
+# uptop
-  <h1>uptop</h1>
-  <p>Self-hosted uptime monitoring with a TUI over SSH.</p>
-  <p>No browser. No client install. Just <code>ssh -p 23234 your-server</code>.</p>
 
-  <p>
+Self-hosted uptime monitor with a TUI you can access over SSH. No browser, no install on the client — just `ssh -p 23234 your-server`.
-    <a href="https://gitea.lerkolabs.com/lerkolabs/uptop/actions/workflows/ci.yml"><img src="https://gitea.lerkolabs.com/lerkolabs/uptop/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
-    <img src="https://img.shields.io/badge/license-MIT-blue" alt="MIT License">
-    <img src="https://img.shields.io/badge/go-1.26-00ADD8?logo=go&logoColor=white" alt="Go 1.26">
-    <img src="https://img.shields.io/docker/pulls/lerkolabs/uptop" alt="Docker Pulls">
-  </p>
 
-  <img src="assets/monitors.png" alt="uptop monitors view" width="800">
+Built on the foundation of [RDGames/go-upkeep](https://github.com/RDGames/go-upkeep).
-</div>
 
-## What is this
+## What it does
 
-An uptime monitor you manage entirely from the terminal. It runs as a server, exposes an SSH endpoint, and drops you into a full TUI — monitors, alerts, logs, nodes, all there.
+- **6 check types**: HTTP, Push (heartbeat), Ping, Port, DNS, Groups
-
+- **9 alert providers**: Discord, Slack, Email, Ntfy, Webhook, Telegram, PagerDuty, Pushover, Gotify
-Built on [RDGames/go-upkeep](https://github.com/RDGames/go-upkeep). Rewritten for clustering, config-as-code, and a proper dashboard.
+- **Config as code**: define monitors in YAML, apply declaratively, version control your setup
-
+- **HA clustering**: leader/follower with automatic failover
-## Features
+- **Prometheus metrics**: `/metrics` endpoint for Grafana dashboards
-
+- **Public status page**: HTML + JSON, toggle with an env var
-- **6 check types** — HTTP, Push (heartbeat), Ping, Port, DNS, Groups
+- **SQLite or Postgres**: SQLite for single-node, Postgres for production
-- **9 alert providers** — Discord, Slack, Email, Ntfy, Webhook, Telegram, PagerDuty, Pushover, Gotify
+- **Uptime Kuma import**: migrate from Kuma with one command
-- **Config as code** — define monitors in YAML, apply declaratively, version control your setup
-- **HA clustering** — leader/follower with automatic failover
-- **Prometheus metrics** — `/metrics` endpoint, wire it straight to Grafana
-- **Public status page** — HTML + JSON, toggle with an env var
-- **SQLite or Postgres** — SQLite for single-node, Postgres for production
-- **Uptime Kuma import** — migrate from Kuma with one command
-
-## Screenshots
-
-<table>
-  <tr>
-    <td><img src="assets/detail.png" alt="detail panel" width="400"></td>
-    <td><img src="assets/alerts.png" alt="alerts view" width="400"></td>
-  </tr>
-  <tr>
-    <td><img src="assets/logs.png" alt="logs view" width="400"></td>
-    <td><img src="assets/nodes.png" alt="cluster nodes" width="400"></td>
-  </tr>
-  <tr>
-    <td colspan="2" align="center"><img src="assets/theme.png" alt="theme selection" width="600"></td>
-  </tr>
-</table>
 
 ## Quick start
 
@@ -53,7 +22,7 @@ go run cmd/uptop/main.go
 ssh -p 23234 localhost
 ```
 
-Want some data to look at first:
+Seed some demo data to see it in action:
 
 ```bash
 go run cmd/uptop/main.go -demo
@@ -61,45 +30,22 @@ go run cmd/uptop/main.go -demo
 
 ## Install
 
-<details>
+### From source
-<summary><strong>Docker (recommended)</strong></summary>
-
-```yaml
-services:
-  uptop:
-    image: lerkolabs/uptop:latest
-    restart: unless-stopped
-    ports:
-      - "23234:23234"
-      - "8080:8080"
-    environment:
-      - UPTOP_DB_TYPE=sqlite
-      - UPTOP_DB_DSN=/data/uptop.db
-      - UPTOP_STATUS_ENABLED=true
-      # - UPTOP_ADMIN_KEY=ssh-ed25519 AAAA... you@host
-    volumes:
-      - ./data:/data
-```
-
-First run: set `UPTOP_ADMIN_KEY` to your SSH public key, or attach to the container and add it in the Users tab.
-
-</details>
-
-<details>
-<summary><strong>Binary</strong></summary>
-
-Download from [Releases](https://gitea.lerkolabs.com/lerkolabs/uptop/releases).
-
-</details>
-
-<details>
-<summary><strong>From source</strong></summary>
 
 ```bash
-go install gitea.lerkolabs.com/lerkolabs/uptop/cmd/uptop@latest
+go install gitea.lerkolabs.com/lerko/uptop/cmd/uptop@latest
 ```
 
-</details>
+### Docker
+
+```bash
+docker pull lerko/uptop:latest
+docker run -p 23234:23234 -p 8080:8080 -v ./data:/data lerko/uptop
+```
+
+### Binary
+
+Download from [Releases](https://gitea.lerkolabs.com/lerko/uptop/releases).
 
 ## Config as code
 
@@ -117,11 +63,35 @@ uptop apply -f monitors.yaml --dry-run   # see what would change
 uptop apply -f monitors.yaml --prune     # delete anything not in the YAML
 ```
 
-Full reference in [docs/config-as-code.md](docs/config-as-code.md).
+See [docs/config-as-code.md](docs/config-as-code.md) for the full reference.
+
+## Docker
+
+```yaml
+services:
+  monitor:
+    build: .
+    restart: unless-stopped
+    stdin_open: true
+    tty: true
+    ports:
+      - "23234:23234"
+      - "8080:8080"
+    volumes:
+      - ./data:/data
+      - ./ssh_keys:/app/.ssh
+    environment:
+      - UPTOP_DB_TYPE=sqlite
+      - UPTOP_DB_DSN=/data/uptop.db
+      - UPTOP_STATUS_ENABLED=true
+      - UPTOP_CLUSTER_SECRET=change-me
+```
+
+First run: attach to the container (`docker attach uptop`), go to the Users tab, add your SSH public key. Then detach with `Ctrl+P, Ctrl+Q` and connect normally over SSH.
 
 ## Environment variables
 
-| Variable | Default | Description |
+| Variable | Default | What it does |
 |---|---|---|
 | `UPTOP_PORT` | `23234` | SSH server port |
 | `UPTOP_HTTP_PORT` | `8080` | HTTP server port (status page, push, metrics) |
@@ -133,7 +103,6 @@ Full reference in [docs/config-as-code.md](docs/config-as-code.md).
 | `UPTOP_PEER_URL` | | Leader URL for follower nodes |
 | `UPTOP_CLUSTER_SECRET` | | Shared key for cluster + API auth |
 | `UPTOP_INSECURE_SKIP_VERIFY` | `false` | Skip TLS verification for checks |
-| `UPTOP_ADMIN_KEY` | | SSH public key seeded as first admin on startup |
 
 ## Migrating from Uptime Kuma
 

cmd/uptop/main.go

@@ -17,14 +17,14 @@ import (
 	"syscall"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/cluster"
+	"gitea.lerkolabs.com/lerko/uptop/internal/cluster"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/config"
+	"gitea.lerkolabs.com/lerko/uptop/internal/config"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/importer"
+	"gitea.lerkolabs.com/lerko/uptop/internal/importer"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/server"
+	"gitea.lerkolabs.com/lerko/uptop/internal/server"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/store"
+	"gitea.lerkolabs.com/lerko/uptop/internal/store"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/tui"
+	"gitea.lerkolabs.com/lerko/uptop/internal/tui"
 
 	tea "github.com/charmbracelet/bubbletea"
 	"github.com/charmbracelet/ssh"

go.mod

@@ -1,4 +1,4 @@
-module gitea.lerkolabs.com/lerkolabs/uptop
+module gitea.lerkolabs.com/lerko/uptop
 
 go 1.26.3
 

internal/alert/alert.go

@@ -11,7 +11,7 @@ import (
 	"strings"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 )
 
 var alertClient = &http.Client{Timeout: 10 * time.Second}

internal/alert/alert_test.go

@@ -7,7 +7,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 )
 
 func TestHTTPProviderDiscord(t *testing.T) {

internal/cluster/cluster.go

@@ -7,7 +7,7 @@ import (
 	"strings"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
 )
 
 type Config struct {

internal/cluster/cluster_test.go

@@ -10,8 +10,8 @@ import (
 	"testing"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
 )
 
 // --- Mock Store (minimal, for monitor.NewEngine) ---

internal/cluster/probe.go

@@ -12,8 +12,8 @@ import (
 	"sync"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
 )
 
 type ProbeConfig struct {

internal/config/apply.go

@@ -2,8 +2,8 @@ package config
 
 import (
 	"fmt"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/store"
+	"gitea.lerkolabs.com/lerko/uptop/internal/store"
 	"reflect"
 	"strings"
 )

internal/config/apply_test.go

@@ -1,8 +1,8 @@
 package config
 
 import (
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/store"
+	"gitea.lerkolabs.com/lerko/uptop/internal/store"
 	"strings"
 	"testing"
 )

internal/config/export.go

@@ -5,8 +5,8 @@ import (
 	"os"
 	"sort"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/store"
+	"gitea.lerkolabs.com/lerko/uptop/internal/store"
 
 	"gopkg.in/yaml.v3"
 )

internal/config/export_test.go

@@ -1,7 +1,7 @@
 package config
 
 import (
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 	"testing"
 )
 

internal/importer/kuma.go

@@ -3,7 +3,7 @@ package importer
 import (
 	"encoding/json"
 	"fmt"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 	"os"
 	"strings"
 )

internal/metrics/prometheus.go

@@ -2,8 +2,8 @@ package metrics
 
 import (
 	"fmt"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
 	"net/http"
 	"sort"
 	"strings"

internal/metrics/prometheus_test.go

@@ -8,8 +8,8 @@ import (
 	"testing"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
 )
 
 type mockStore struct {

internal/monitor/checker.go

@@ -9,7 +9,7 @@ import (
 	"strings"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 
 	"github.com/miekg/dns"
 	probing "github.com/prometheus-community/pro-bing"

internal/monitor/checker_test.go

@@ -9,7 +9,7 @@ import (
 	"testing"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 )
 
 func TestRunCheck_HTTP_Success(t *testing.T) {

internal/monitor/monitor.go

@@ -11,9 +11,9 @@ import (
 	"sync"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/alert"
+	"gitea.lerkolabs.com/lerko/uptop/internal/alert"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/store"
+	"gitea.lerkolabs.com/lerko/uptop/internal/store"
 )
 
 const (

internal/monitor/monitor_test.go

@@ -6,7 +6,7 @@ import (
 	"testing"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 )
 
 // --- Mock Store ---

internal/server/server.go

@@ -11,11 +11,11 @@ import (
 	"strings"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/importer"
+	"gitea.lerkolabs.com/lerko/uptop/internal/importer"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/metrics"
+	"gitea.lerkolabs.com/lerko/uptop/internal/metrics"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/store"
+	"gitea.lerkolabs.com/lerko/uptop/internal/store"
 )
 
 const maxRequestBody = 1 << 20

internal/server/server_test.go

@@ -10,8 +10,8 @@ import (
 	"testing"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
 )
 
 // --- Mock Store ---

internal/store/sqlstore.go

@@ -9,7 +9,7 @@ import (
 	"strings"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 )
 
 const (

internal/store/sqlstore_test.go

@@ -1,7 +1,7 @@
 package store
 
 import (
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 	"testing"
 )
 

internal/store/store.go

@@ -1,7 +1,7 @@
 package store
 
 import (
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 )
 
 type Store interface {

internal/tui/tab_alerts.go

@@ -5,7 +5,7 @@ import (
 	"strings"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
 	tea "github.com/charmbracelet/bubbletea"
 	"github.com/charmbracelet/huh"
 	"github.com/charmbracelet/lipgloss"

internal/tui/tab_maint.go

@@ -5,7 +5,7 @@ import (
 	"strconv"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 
 	tea "github.com/charmbracelet/bubbletea"
 	"github.com/charmbracelet/huh"

internal/tui/tab_sites.go

@@ -7,7 +7,7 @@ import (
 	"strings"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
 
 	tea "github.com/charmbracelet/bubbletea"
 	"github.com/charmbracelet/huh"

internal/tui/tui.go

@@ -9,9 +9,9 @@ import (
 	"strings"
 	"time"
 
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/models"
+	"gitea.lerkolabs.com/lerko/uptop/internal/models"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/monitor"
+	"gitea.lerkolabs.com/lerko/uptop/internal/monitor"
-	"gitea.lerkolabs.com/lerkolabs/uptop/internal/store"
+	"gitea.lerkolabs.com/lerko/uptop/internal/store"
 
 	"github.com/charmbracelet/bubbles/viewport"
 	tea "github.com/charmbracelet/bubbletea"

vhs/backfill/main.go

@@ -0,0 +1,368 @@
+package main
+
+import (
+	"database/sql"
+	"fmt"
+	"math/rand/v2"
+	"os"
+	"time"
+
+	_ "github.com/mattn/go-sqlite3"
+)
+
+func main() {
+	if len(os.Args) < 2 {
+		fmt.Fprintln(os.Stderr, "usage: backfill <db-path>")
+		os.Exit(1)
+	}
+	db, err := sql.Open("sqlite3", os.Args[1])
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "open: %v\n", err)
+		os.Exit(1)
+	}
+	defer db.Close()
+
+	ids, err := loadSiteIDs(db)
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "load site IDs: %v\n", err)
+		os.Exit(1)
+	}
+
+	rng := rand.New(rand.NewPCG(42, 0)) //nolint:gosec // deterministic seed for reproducible demo data
+	now := time.Now().UTC()
+
+	if err := backfillHistory(db, rng, now, ids); err != nil {
+		fmt.Fprintf(os.Stderr, "history: %v\n", err)
+		os.Exit(1)
+	}
+	if err := backfillStateChanges(db, now, ids); err != nil {
+		fmt.Fprintf(os.Stderr, "state changes: %v\n", err)
+		os.Exit(1)
+	}
+	if err := backfillLogs(db, now); err != nil {
+		fmt.Fprintf(os.Stderr, "logs: %v\n", err)
+		os.Exit(1)
+	}
+	if err := backfillNodes(db, now); err != nil {
+		fmt.Fprintf(os.Stderr, "nodes: %v\n", err)
+		os.Exit(1)
+	}
+	if err := backfillMaintenance(db, now, ids); err != nil {
+		fmt.Fprintf(os.Stderr, "maintenance: %v\n", err)
+		os.Exit(1)
+	}
+	alertIDs, err := loadAlertIDs(db)
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "load alert IDs: %v\n", err)
+		os.Exit(1)
+	}
+	if err := backfillAlertHealth(db, now, alertIDs); err != nil {
+		fmt.Fprintf(os.Stderr, "alert health: %v\n", err)
+		os.Exit(1)
+	}
+
+	var count int
+	_ = db.QueryRow("SELECT COUNT(*) FROM check_history").Scan(&count)
+	fmt.Printf("Backfill complete: %d check records\n", count)
+
+	var token string
+	if err := db.QueryRow("SELECT token FROM sites WHERE name='Nightly Backup'").Scan(&token); err == nil {
+		fmt.Printf("PUSH_TOKEN=%s\n", token)
+	}
+}
+
+func loadSiteIDs(db *sql.DB) (map[string]int, error) {
+	rows, err := db.Query("SELECT id, name FROM sites")
+	if err != nil {
+		return nil, err
+	}
+	return scanNameIDs(rows)
+}
+
+func loadAlertIDs(db *sql.DB) (map[string]int, error) {
+	rows, err := db.Query("SELECT id, name FROM alerts")
+	if err != nil {
+		return nil, err
+	}
+	return scanNameIDs(rows)
+}
+
+func scanNameIDs(rows *sql.Rows) (map[string]int, error) {
+	defer rows.Close()
+	ids := make(map[string]int)
+	for rows.Next() {
+		var id int
+		var name string
+		if err := rows.Scan(&id, &name); err != nil {
+			return nil, err
+		}
+		ids[name] = id
+	}
+	return ids, rows.Err()
+}
+
+// backfillAlertHealth seeds realistic send health so the Alerts tab shows recent,
+// healthy "last sent" times and green health dots instead of "never" across the board.
+func backfillAlertHealth(db *sql.DB, now time.Time, alertIDs map[string]int) error {
+	type health struct {
+		name    string
+		sentAgo time.Duration
+		ok      bool
+		sends   int
+		fails   int
+	}
+	rows := []health{
+		{"Discord Homelab", 4 * time.Minute, true, 37, 0},
+		{"Slack Ops", 9 * time.Minute, true, 21, 1},
+		{"Ntfy Alerts", 1 * time.Hour, true, 12, 0},
+		{"Email Oncall", 3 * time.Hour, true, 5, 0},
+	}
+
+	tx, err := db.Begin()
+	if err != nil {
+		return err
+	}
+	defer func() { _ = tx.Rollback() }()
+
+	stmt, err := tx.Prepare("INSERT OR REPLACE INTO alert_health (alert_id, last_send_at, last_send_ok, last_error, send_count, fail_count) VALUES (?, ?, ?, ?, ?, ?)")
+	if err != nil {
+		return err
+	}
+	defer stmt.Close()
+
+	for _, r := range rows {
+		id, ok := alertIDs[r.name]
+		if !ok {
+			continue
+		}
+		sentAt := now.Add(-r.sentAgo).Format("2006-01-02 15:04:05")
+		if _, err := stmt.Exec(id, sentAt, r.ok, "", r.sends, r.fails); err != nil {
+			return err
+		}
+	}
+	return tx.Commit()
+}
+
+type monitorProfile struct {
+	name     string
+	minMs    int
+	maxMs    int
+	downFrom int // first DOWN check index (-1 = always up)
+	downTo   int // exclusive end of the DOWN window; use 60 (total) for a still-down monitor
+}
+
+func backfillHistory(db *sql.DB, rng *rand.Rand, now time.Time, ids map[string]int) error {
+	// Latency ranges reflect monitoring public services over the internet, so the
+	// detail histogram brackets the live latency the engine measures at capture time.
+	// 60 checks * 24m spacing = a 24h window; dip indices place outages within it.
+	profiles := []monitorProfile{
+		{"Nextcloud", 200, 600, 47, 48},       // brief blip ~5h ago, recovered
+		{"Jellyfin", 40, 180, 15, 16},         // brief blip ~18h ago, recovered
+		{"Home Assistant", 30, 120, -1, 0},    //
+		{"Gitea", 50, 200, -1, 0},             //
+		{"Traefik Dashboard", 60, 200, -1, 0}, //
+		{"Vaultwarden", 80, 250, -1, 0},       //
+		{"Personal Blog", 40, 160, -1, 0},     //
+		{"Immich", 60, 300, 30, 31},           // brief blip ~12h ago; periodic spikes below
+		{"Auth Portal", 30, 90, 40, 60},       // DOWN ~8h ago, still down
+		{"Edge Router", 5, 20, -1, 0},         // ping
+		{"Postgres", 1, 6, -1, 0},             // port
+		{"DNS Primary", 8, 30, -1, 0},         // dns
+	}
+
+	tx, err := db.Begin()
+	if err != nil {
+		return err
+	}
+	defer func() { _ = tx.Rollback() }()
+
+	stmt, err := tx.Prepare("INSERT INTO check_history (site_id, latency_ns, is_up, checked_at) VALUES (?, ?, ?, ?)")
+	if err != nil {
+		return err
+	}
+	defer stmt.Close()
+
+	const total = 60
+	for _, p := range profiles {
+		siteID, ok := ids[p.name]
+		if !ok {
+			continue
+		}
+		for i := 0; i < total; i++ {
+			minutesAgo := (total - i) * 24
+			checkedAt := now.Add(-time.Duration(minutesAgo) * time.Minute)
+
+			var latencyNs int64
+			isUp := true
+
+			if p.downFrom >= 0 && i >= p.downFrom && i < p.downTo {
+				latencyNs = 0
+				isUp = false
+			} else {
+				ms := p.minMs + rng.IntN(p.maxMs-p.minMs)
+				if p.name == "Immich" && i%17 == 0 {
+					ms = 250 + rng.IntN(100)
+				}
+				latencyNs = int64(ms) * 1_000_000
+			}
+
+			if _, err := stmt.Exec(siteID, latencyNs, isUp, checkedAt.Format("2006-01-02 15:04:05")); err != nil {
+				return err
+			}
+		}
+	}
+	return tx.Commit()
+}
+
+func backfillStateChanges(db *sql.DB, now time.Time, ids map[string]int) error {
+	type sc struct {
+		name   string
+		from   string
+		to     string
+		reason string
+		at     time.Time
+	}
+	// Timed to line up with the history dips (Nextcloud ~5h, Immich ~12h, Jellyfin ~18h)
+	// and the still-down Auth Portal (~8h), so detail panels read coherently.
+	changes := []sc{
+		{"Nextcloud", "UP", "DOWN", "read timeout", now.Add(-5 * time.Hour).Add(-8 * time.Minute)},
+		{"Nextcloud", "DOWN", "UP", "", now.Add(-5 * time.Hour)},
+		{"Auth Portal", "UP", "DOWN", "no such host", now.Add(-8 * time.Hour)},
+		{"Immich", "UP", "DOWN", "502 Bad Gateway", now.Add(-12 * time.Hour).Add(-8 * time.Minute)},
+		{"Immich", "DOWN", "UP", "", now.Add(-12 * time.Hour)},
+		{"Jellyfin", "UP", "DOWN", "connection reset", now.Add(-18 * time.Hour).Add(-5 * time.Minute)},
+		{"Jellyfin", "DOWN", "UP", "", now.Add(-18 * time.Hour)},
+	}
+
+	tx, err := db.Begin()
+	if err != nil {
+		return err
+	}
+	defer func() { _ = tx.Rollback() }()
+
+	stmt, err := tx.Prepare("INSERT INTO state_changes (site_id, from_status, to_status, error_reason, changed_at) VALUES (?, ?, ?, ?, ?)")
+	if err != nil {
+		return err
+	}
+	defer stmt.Close()
+
+	for _, c := range changes {
+		siteID, ok := ids[c.name]
+		if !ok {
+			continue
+		}
+		if _, err := stmt.Exec(siteID, c.from, c.to, c.reason, c.at.Format("2006-01-02 15:04:05")); err != nil {
+			return err
+		}
+	}
+	return tx.Commit()
+}
+
+func backfillLogs(db *sql.DB, now time.Time) error {
+	type logEntry struct {
+		text string
+		at   time.Time
+	}
+	ago := func(h, m, s int) time.Time {
+		return now.Add(-(time.Duration(h)*time.Hour + time.Duration(m)*time.Minute + time.Duration(s)*time.Second))
+	}
+	// Ordered newest-first. The bracket time is derived from `at` (not hardcoded), so the
+	// Logs view — which renders the leading [HH:MM] — reads chronologically. Outage times
+	// line up with the state changes and history dips above.
+	logs := []logEntry{
+		{"Monitor 'Nextcloud' recovered (was down 8m)", ago(5, 0, 0)},
+		{"Monitor 'Nextcloud' confirmed DOWN: read timeout", ago(5, 8, 0)},
+		{"Monitor 'Nextcloud' failed check 2/2", ago(5, 8, 30)},
+		{"Monitor 'Nextcloud' failed check 1/2", ago(5, 9, 0)},
+		{"Monitor 'Auth Portal' confirmed DOWN: no such host", ago(8, 0, 0)},
+		{"Monitor 'Auth Portal' failed check 2/2", ago(8, 0, 30)},
+		{"Monitor 'Auth Portal' failed check 1/2", ago(8, 1, 0)},
+		{"Monitor 'Immich' recovered (was down 8m)", ago(12, 0, 0)},
+		{"Monitor 'Immich' confirmed DOWN: 502 Bad Gateway", ago(12, 8, 0)},
+		{"Monitor 'Immich' failed check 3/3", ago(12, 8, 30)},
+		{"Monitor 'Immich' failed check 2/3", ago(12, 9, 0)},
+		{"Monitor 'Immich' failed check 1/3", ago(12, 9, 30)},
+		{"Monitor 'Jellyfin' recovered (was down 5m)", ago(18, 0, 0)},
+		{"Monitor 'Jellyfin' confirmed DOWN: connection reset", ago(18, 5, 0)},
+		{"Monitor 'Jellyfin' failed check 2/2", ago(18, 5, 30)},
+		{"Monitor 'Jellyfin' failed check 1/2", ago(18, 6, 0)},
+		{"SSL warning: certificate for 'Personal Blog' expires in 9 days", ago(20, 0, 0)},
+		{"Engine RESUMED (Active)", ago(22, 0, 0)},
+		{"Loaded check history from database", ago(22, 0, 5)},
+	}
+
+	tx, err := db.Begin()
+	if err != nil {
+		return err
+	}
+	defer func() { _ = tx.Rollback() }()
+
+	stmt, err := tx.Prepare("INSERT INTO logs (message, created_at) VALUES (?, ?)")
+	if err != nil {
+		return err
+	}
+	defer stmt.Close()
+
+	for _, l := range logs {
+		// Bracket in local time to match the engine's live AddLog timestamps;
+		// created_at stays UTC to match the store's CURRENT_TIMESTAMP ordering.
+		msg := "[" + l.at.Local().Format("15:04") + "] " + l.text
+		if _, err := stmt.Exec(msg, l.at.Format("2006-01-02 15:04:05")); err != nil {
+			return err
+		}
+	}
+	return tx.Commit()
+}
+
+func backfillNodes(db *sql.DB, now time.Time) error {
+	// Multiple regions to show distributed probes. All seen "now" so they read ONLINE
+	// for the whole capture window (kept under the 60s freshness threshold by the tape).
+	nodes := []struct{ id, name, region string }{
+		{"node-use1", "leader", "us-east"},
+		{"node-euw1", "probe-eu", "eu-west"},
+		{"node-apse1", "probe-ap", "ap-southeast"},
+	}
+	ts := now.Format("2006-01-02 15:04:05")
+	for _, n := range nodes {
+		if _, err := db.Exec(
+			"INSERT OR REPLACE INTO nodes (id, name, region, last_seen, version) VALUES (?, ?, ?, ?, ?)",
+			n.id, n.name, n.region, ts, "2026.05.1",
+		); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func backfillMaintenance(db *sql.DB, now time.Time, ids map[string]int) error {
+	tx, err := db.Begin()
+	if err != nil {
+		return err
+	}
+	defer func() { _ = tx.Rollback() }()
+
+	stmt, err := tx.Prepare("INSERT INTO maintenance_windows (monitor_id, title, description, type, start_time, end_time, created_by) VALUES (?, ?, ?, ?, ?, ?, ?)")
+	if err != nil {
+		return err
+	}
+	defer stmt.Close()
+
+	jellyfinID := ids["Jellyfin"]
+	past := now.Add(-3 * 24 * time.Hour)
+	if _, err := stmt.Exec(jellyfinID, "Jellyfin upgrade", "Upgrade to v10.10 + plugin updates", "maintenance",
+		past.Format("2006-01-02 15:04:05"),
+		past.Add(2*time.Hour).Format("2006-01-02 15:04:05"),
+		"admin"); err != nil {
+		return err
+	}
+
+	future := now.Add(2 * 24 * time.Hour)
+	if _, err := stmt.Exec(0, "Network switch replacement", "Replacing core switch in rack 2", "maintenance",
+		future.Format("2006-01-02 15:04:05"),
+		future.Add(4*time.Hour).Format("2006-01-02 15:04:05"),
+		"admin"); err != nil {
+		return err
+	}
+
+	return tx.Commit()
+}

vhs/crop/main.go

@@ -0,0 +1,123 @@
+// Command crop trims the uniform background border around each VHS screenshot so the
+// content fills the frame instead of floating in a large empty terminal. Sparse views
+// (alerts, detail, nodes) would otherwise sit in a sea of dead space.
+//
+// Usage: crop [dir]   (dir defaults to vhs/screenshots)
+package main
+
+import (
+	"fmt"
+	"image"
+	"image/color"
+	"image/png"
+	"os"
+	"path/filepath"
+)
+
+// pad is the margin (px) left around the detected content. tol is the per-channel
+// colour distance (summed) above which a pixel counts as content rather than background.
+const (
+	pad = 24
+	tol = 28
+)
+
+func main() {
+	dir := "vhs/screenshots"
+	if len(os.Args) > 1 {
+		dir = os.Args[1]
+	}
+	paths, err := filepath.Glob(filepath.Join(dir, "*.png"))
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "glob: %v\n", err)
+		os.Exit(1)
+	}
+	if len(paths) == 0 {
+		fmt.Fprintf(os.Stderr, "no PNGs in %s\n", dir)
+		os.Exit(1)
+	}
+	for _, p := range paths {
+		w, h, err := cropFile(p)
+		if err != nil {
+			fmt.Fprintf(os.Stderr, "crop %s: %v\n", p, err)
+			os.Exit(1)
+		}
+		fmt.Printf("cropped %s -> %dx%d\n", filepath.Base(p), w, h)
+	}
+}
+
+func cropFile(path string) (int, int, error) {
+	f, err := os.Open(path) //nolint:gosec // dev tool: paths come from a trusted local glob
+	if err != nil {
+		return 0, 0, err
+	}
+	src, err := png.Decode(f)
+	_ = f.Close()
+	if err != nil {
+		return 0, 0, err
+	}
+
+	b := src.Bounds()
+	// Background colour sampled from a corner — always inside VHS's blank padding.
+	bgR, bgG, bgB := rgb(src.At(b.Min.X+2, b.Min.Y+2))
+
+	minX, minY := b.Max.X, b.Max.Y
+	maxX, maxY := b.Min.X, b.Min.Y
+	found := false
+	for y := b.Min.Y; y < b.Max.Y; y++ {
+		for x := b.Min.X; x < b.Max.X; x++ {
+			r, g, bl := rgb(src.At(x, y))
+			if abs(r-bgR)+abs(g-bgG)+abs(bl-bgB) > tol {
+				found = true
+				minX, minY = min(minX, x), min(minY, y)
+				maxX, maxY = max(maxX, x), max(maxY, y)
+			}
+		}
+	}
+	if !found {
+		return b.Dx(), b.Dy(), nil // blank frame — leave untouched
+	}
+
+	minX = clamp(minX-pad, b.Min.X, b.Max.X)
+	minY = clamp(minY-pad, b.Min.Y, b.Max.Y)
+	maxX = clamp(maxX+pad+1, b.Min.X, b.Max.X)
+	maxY = clamp(maxY+pad+1, b.Min.Y, b.Max.Y)
+
+	dst := image.NewRGBA(image.Rect(0, 0, maxX-minX, maxY-minY))
+	for y := minY; y < maxY; y++ {
+		for x := minX; x < maxX; x++ {
+			dst.Set(x-minX, y-minY, src.At(x, y))
+		}
+	}
+
+	out, err := os.Create(path) //nolint:gosec // dev tool: paths come from a trusted local glob
+	if err != nil {
+		return 0, 0, err
+	}
+	defer out.Close() //nolint:errcheck // best-effort close on write path
+	if err := png.Encode(out, dst); err != nil {
+		return 0, 0, err
+	}
+	return dst.Bounds().Dx(), dst.Bounds().Dy(), nil
+}
+
+func rgb(c color.Color) (int, int, int) {
+	r, g, b, _ := c.RGBA()
+	return int(r >> 8), int(g >> 8), int(b >> 8)
+}
+
+func abs(x int) int {
+	if x < 0 {
+		return -x
+	}
+	return x
+}
+
+func clamp(v, lo, hi int) int {
+	if v < lo {
+		return lo
+	}
+	if v > hi {
+		return hi
+	}
+	return v
+}

vhs/demo.tape

@@ -0,0 +1,72 @@
+Set Shell "bash"
+Set Width 1400
+Set Height 800
+Set FontSize 14
+Set Padding 20
+Set Framerate 15
+Set TypingSpeed 50ms
+
+# Seed demo data + start uptop (UPTOP_DEMO=1 → stable pulse dot for stills).
+Hide
+Type "bash vhs/setup.sh /tmp/uptop-vhs.db"
+Enter
+# Warm-up: push heartbeat lands (~10s) and initial checks settle. Kept short so every
+# capture stays inside the 60s node-freshness window (consistent "3 probes" footer).
+Sleep 18s
+Show
+Sleep 2s
+
+# 1. Sites — hero shot: mixed states, history sparklines, SSL, retries.
+Screenshot vhs/screenshots/monitors.png
+Sleep 1s
+
+# 2. Detail — drill into Nextcloud (6th row from the top).
+Down
+Sleep 150ms
+Down
+Sleep 150ms
+Down
+Sleep 150ms
+Down
+Sleep 150ms
+Down
+Sleep 300ms
+Type "i"
+Sleep 2s
+Screenshot vhs/screenshots/detail.png
+Sleep 500ms
+Escape
+Sleep 1s
+
+# 3. Alerts — channels with health dots + recent "last sent".
+Tab
+Sleep 1500ms
+Screenshot vhs/screenshots/alerts.png
+Sleep 500ms
+
+# 4. Logs — chronological, severity-coloured event stream.
+Tab
+Sleep 1500ms
+Screenshot vhs/screenshots/logs.png
+Sleep 500ms
+
+# 5. Nodes — distributed probes across regions.
+Tab
+Sleep 1500ms
+Screenshot vhs/screenshots/nodes.png
+Sleep 500ms
+
+# 6. Theme — cycle to the next theme, return to Sites for an alternate-palette hero.
+Type "T"
+Sleep 500ms
+Tab
+Sleep 200ms
+Tab
+Sleep 200ms
+Tab
+Sleep 1s
+Screenshot vhs/screenshots/theme.png
+Sleep 500ms
+
+Type "q"
+Sleep 1s

vhs/seed.yaml

@@ -0,0 +1,141 @@
+alerts:
+  - name: Discord Homelab
+    type: discord
+    settings:
+      url: https://discord.com/api/webhooks/1234567890/demo-token
+
+  - name: Ntfy Alerts
+    type: webhook
+    settings:
+      url: https://ntfy.example.com/homelab-alerts
+
+  - name: Email Oncall
+    type: email
+    settings:
+      host: smtp.example.com
+      port: "587"
+      user: alerts@example.com
+      pass: "••••••••"
+      from: alerts@example.com
+      to: oncall@example.com
+
+  - name: Slack Ops
+    type: slack
+    settings:
+      url: https://hooks.slack.com/services/T00000/B00000/demo-token
+
+monitors:
+  # HTTP — homelab services
+  - name: Nextcloud
+    type: http
+    url: https://nextcloud.com
+    interval: 30
+    alert: Discord Homelab
+    check_ssl: true
+    expiry_threshold: 14
+    max_retries: 2
+
+  - name: Jellyfin
+    type: http
+    url: https://jellyfin.org
+    interval: 30
+    alert: Discord Homelab
+    max_retries: 2
+
+  - name: Home Assistant
+    type: http
+    url: https://www.home-assistant.io
+    interval: 30
+    alert: Discord Homelab
+    max_retries: 3
+
+  - name: Gitea
+    type: http
+    url: https://about.gitea.com
+    interval: 60
+    alert: Discord Homelab
+    check_ssl: true
+    expiry_threshold: 14
+    max_retries: 2
+
+  - name: Traefik Dashboard
+    type: http
+    url: https://traefik.io
+    interval: 60
+    alert: Discord Homelab
+    max_retries: 1
+
+  - name: Vaultwarden
+    type: http
+    url: https://bitwarden.com
+    interval: 30
+    alert: Discord Homelab
+    check_ssl: true
+    expiry_threshold: 14
+    max_retries: 3
+
+  - name: Personal Blog
+    type: http
+    url: https://jvns.ca
+    interval: 120
+    alert: Discord Homelab
+    check_ssl: true
+    expiry_threshold: 14
+    max_retries: 2
+
+  - name: Immich
+    type: http
+    url: https://immich.app
+    interval: 60
+    alert: Discord Homelab
+    check_ssl: true
+    expiry_threshold: 7
+    max_retries: 3
+
+  # HTTP — deliberate failure (non-resolving homelab host → stays DOWN)
+  - name: Auth Portal
+    type: http
+    url: https://auth.home.arpa
+    interval: 30
+    alert: Discord Homelab
+    max_retries: 2
+
+  # Push — cron jobs
+  - name: Nightly Backup
+    type: push
+    interval: 300
+    alert: Discord Homelab
+
+  - name: Cert Renewal
+    type: push
+    interval: 300
+    alert: Discord Homelab
+
+  # Infrastructure group
+  - name: Infrastructure
+    type: group
+    alert: Discord Homelab
+    monitors:
+      - name: Edge Router
+        type: ping
+        hostname: 8.8.8.8
+        interval: 30
+        alert: Discord Homelab
+        timeout: 5
+
+      - name: Postgres
+        type: port
+        hostname: localhost
+        port: 18099
+        interval: 60
+        alert: Discord Homelab
+        timeout: 5
+
+      - name: DNS Primary
+        type: dns
+        hostname: google.com
+        dns_server: 8.8.8.8
+        dns_resolve_type: A
+        interval: 60
+        alert: Discord Homelab
+        timeout: 5

vhs/setup.sh

@@ -0,0 +1,31 @@
+#!/bin/bash
+# VHS screenshot setup: seed monitors, backfill history, start server.
+set -e
+DB="${1:?usage: setup.sh <db-path>}"
+
+rm -f "$DB" "$DB-shm" "$DB-wal"
+
+echo "==> Seeding monitors and alerts..."
+UPTOP_DB_DSN="$DB" ./uptop apply -f vhs/seed.yaml 2>&1
+
+echo "==> Backfilling check history..."
+# Build first so the backfill's `now` (node last_seen, heartbeat timing) isn't racing
+# a cold compile — keeps the capture window deterministic.
+go build -o /tmp/uptop-backfill ./vhs/backfill/
+BACKFILL_OUT=$(/tmp/uptop-backfill "$DB")
+echo "$BACKFILL_OUT"
+
+PUSH_TOKEN=$(echo "$BACKFILL_OUT" | grep '^PUSH_TOKEN=' | cut -d= -f2)
+if [ -n "$PUSH_TOKEN" ]; then
+  echo "==> Sending push heartbeat in 10s (background)..."
+  (sleep 10 && curl -s "http://localhost:18099/api/push" -H "Authorization: Bearer $PUSH_TOKEN" > /dev/null 2>&1) &
+fi
+
+echo "==> Starting uptop server..."
+exec env \
+  UPTOP_DB_DSN="$DB" \
+  UPTOP_PORT=23299 \
+  UPTOP_HTTP_PORT=18099 \
+  UPTOP_ALLOW_PRIVATE_TARGETS=true \
+  UPTOP_DEMO=1 \
+  ./uptop serve 2>/dev/null