ON_OFF Phase 0-3: service-controller (.13:8443, token-gated, containers+systemd-user, audit log) + portal toggle cards (live status, per-user who, failed token, RAM) — full E2E verified

deploy/service-controller/services.toml

@@ -0,0 +1,85 @@
+# service-controller allowlist — ON_OFF.md §3/§4.
+#
+# Only services listed here can be started/stopped. Everything else 404s.
+# Safety (non-negotiable, §6): never list console deps, house-critical audio,
+# voice/whisper/HA path, or n8n/prefect-server (shared infra, always on).
+#
+# kind:
+#   container   -> docker start/stop <target>   (sam is in the docker group)
+#   systemd-user-> systemctl --user start/stop <target>
+#
+# group "media": family-facing editors (shared by everyone).
+# group "pipeline": photo ingestion (prefect worker + dashboard) — admin only.
+# group "admin": heavy infra someone may pause when idle — admin only.
+
+[[services]]
+id = "gimp"
+kind = "container"
+target = "family-home-lab-gimp-1"
+group = "media"
+label = "GIMP"
+ram_mb = 233
+default_state = "stopped"
+who = ["sam", "finn", "harry", "jo"]
+
+[[services]]
+id = "video-editor"
+kind = "container"
+target = "family-home-lab-video-editor-1"
+group = "media"
+label = "Video Editor (KdenLive)"
+ram_mb = 237
+default_state = "stopped"
+who = ["sam", "finn", "harry", "jo"]
+
+[[services]]
+id = "audio-editor"
+kind = "container"
+target = "family-home-lab-audio-editor-1"
+group = "media"
+label = "Audio Editor (Audacity)"
+ram_mb = 201
+default_state = "stopped"
+who = ["sam", "finn", "harry", "jo"]
+
+[[services]]
+id = "lmms"
+kind = "container"
+target = "lmms"
+group = "media"
+label = "LMMS Music Studio"
+ram_mb = 798      # incl. webtop desktop; Xvfb fixed to 2560x1440 (2026-10-07)
+default_state = "stopped"
+who = ["sam", "finn", "harry", "jo"]
+
+[[services]]
+id = "paperclip"
+kind = "systemd-user"
+target = "paperclipai"
+group = "admin"
+label = "Paperclip"
+ram_mb = 495
+default_state = "stopped"
+who = ["sam"]
+
+# Photo ingestion pipeline — admin controlled. Do NOT stop while ingesting
+# Google Photos (user actively working on it, 2026-10-07).
+[[services]]
+id = "prefect-worker"
+kind = "systemd-user"
+target = "prefect-worker"
+group = "pipeline"
+label = "Prefect worker (photo pool)"
+ram_mb = 129
+default_state = "running"
+who = ["sam"]
+
+[[services]]
+id = "photo-dashboard"
+kind = "systemd-user"
+target = "photo-dashboard"
+group = "pipeline"
+label = "Photo pipeline dashboard"
+ram_mb = 112
+default_state = "running"
+who = ["sam"]