Sysop daily ops

Your two main panels:

/admin — admin home

Shows total/active users, post counts, online users, 24-hour activity
totals, recent callers, file queue depth, and quick-action buttons.

Use this for: a quick "is everything OK" check.

/admin/control — control panel

Shows:

Every anetbbs-* systemd service with green/red badges plus
Start / Stop / Restart buttons and a one-click journal viewer.
NodeSpy — every active telnet/SSH/rlogin session, with live
page + last action + idle time. Click the eye icon for a per-node
detail screen with the last screen snapshot.
Live who's-online for both web and terminal users, refreshed
every 5 seconds.

For service start/stop/restart from the web to actually work, the
account the anetbbs-web service runs as (its systemd unit's
User=, anetbbs by default) needs sudoers permission for the units.

update.sh sets this up for you automatically on every run — it
substitutes the real service-account name into the template and
installs it, so a sysop who's run at least one update already has this
working. On a brand-new install that hasn't been updated yet, install
it yourself:

sudo sed "s/^__SERVICE_USER__ /anetbbs /" /opt/anetbbs/deploy/sudoers.anetbbs \
    | sudo tee /etc/sudoers.d/anetbbs > /dev/null
sudo chmod 0440 /etc/sudoers.d/anetbbs
sudo visudo -cf /etc/sudoers.d/anetbbs    # syntax check

Replace anetbbs in the sed command with your actual service
account if you didn't use the installer's default. Don't just cp the
template directly — it ships with a literal __SERVICE_USER__
placeholder, not a real username, so a plain copy installs a rule that
matches nobody.

/admin/pulse — ANetBBS Pulse (mobile status dashboard)

A read-only, mobile-first version of the two panels above, meant for
checking on the BBS from a phone rather than a desk. Shows live callers
(terminal + web), per-service health with CPU/RAM from the metrics
sampler, disk usage, host uptime, and rolling 24-hour totals — no
scrolling, no service-control buttons, just a quick "is everything OK"
glance, auto-refreshing every 15 seconds.

Open it once in a mobile browser while signed in as admin, then use
Add to Home Screen (Android/Chrome shows an in-page Install button;
iPhone/Safari needs the Share menu) to get a standalone app icon —
HTTPS is required for this to work, same as any installable PWA. It
reuses the existing admin session and Control Panel's own service
probes, so there's nothing separate to configure.

Deliberately has no write access anywhere: no start/stop/restart, no
shell, no log browsing, no caller IP/peer addresses in the payload.
For anything beyond a status glance — kicking a session, restarting a
service, reading a journal — use the full Control Panel above.

/admin/checklist — first-launch checklist

Walks through what you've configured vs not (admin password changed,
custom board added, BBS_NAME customized, MOTD pool, default theme,
file area, bulletin posted). Re-runnable, read-only.

/admin/users + /admin/users/:id/manage

The richer user editor — set access level (Mystic-style 0–255), time
budget, lock/verify toggles, sysop notes, password reset, file ratio
view. The basic edit page is fine for renames; use Manage for
fine-grained control.

/admin/inactive-users

Bulk-cleanup interface for stale accounts. Pick a day cutoff, check
the boxes, mass-PM "we miss you" / soft-deactivate / hard-delete.

/admin/pending-users (NUV)

When NUV_ENABLED=true, new users land here for approval.
One-click Approve sends a welcome PM automatically.

Admin notifications

The bell-icon notification system (/notifications/) also fires for
five sysop admin-review events, so you don't have to manually check
each page for new work:

MSP federation registry join requests — fires once a registrant
verifies their contact email, not at the earlier unverified
registration step. Links to /admin/registry/.
QWK node applications — fires when a sysop applies for a QWK
node number, via API or the terminal wizard. Links to
/admin/echomail/hub/qwk/requests.
New users pending NUV approval — fires on registration when NUV
is enabled. Plain email-verification-only signups don't trigger
this — those are fully self-service. Links to /admin/pending-users.
Unknown/bad echomail areas — fires once per newly-discovered
unknown area tag (not once per message) when inbound echomail
arrives for an area this BBS doesn't carry. Links to
/admin/echomail/bad_areas.
Network join applications — fires when someone submits the
public "apply to join this network" form (/join/; see
echomail/federation docs for the feature itself). Links to
/admin/echomail/hub/join/requests.

Every is_admin=True user gets these independently, and each can
toggle any of the five off in Notification Settings
(/notifications/settings) — an admin-only section that's invisible
to non-admin accounts. Default is ON for all five.

/admin/newsletter

Compose a one-time newsletter. Fans out as a PM to every active
verified user. History kept.

/admin/broadcast

Push a real-time toast to every connected web tab AND every
telnet/SSH/rlogin user's terminal. Optional TTL.

/admin/events — scheduled events

Cron-style task scheduler. List view shows every configured event with
its handler, schedule (daily/hourly/weekly/interval, all in UTC),
enabled/disabled state, and computed next-run time.

Handlers come from a fixed registry (anetbbs/events/handlers.py)
— things like TW2 daily maintenance, SQLite VACUUM, log rotation,
the security-update checker, and the InterBBS Wall/Last
Callers/Game Scores inbound-sync jobs (auto-created when those
features are enabled). You pick a handler and a schedule; you can't
register arbitrary new handler code from the UI.
New / Edit forms let you change the schedule (daily HH:MM,
hourly at :MM, weekly day+time, or every-N-minutes interval) and
per-handler params (e.g. max_mb for log rotation, command for
the raw shell handler).
Enable/disable toggle — flip an event off without deleting it.
Run now — fires the handler immediately, in-request, so you see
the result inline instead of waiting for the next scheduled tick or
tailing the journal. Fine for quick jobs (noop, db_vacuum); the
TW2 maintenance handler spawns a node process and can take a moment.
Delete removes the row entirely.

A handful of default events are seeded on fresh installs; add your own
for anything else you want run on a schedule without cron/systemd
timers.

Journals

Every anetbbs-* service writes to systemd journal. From the
control panel each service has a "list" icon showing the last 200
lines. Faster than journalctl alt-tab.