Generated Jul 9, 2026 by the Network Services Team. Full document at /root/.hermes/references/ops-portal-recommendations.md.

## Architecture

**Current:** Static HTML served by Caddy, reads JSON data file. Read-only.
**Target:** FastAPI backend with auth, action endpoints, audit logging, RBAC.

**Strategy:** Add action buttons to existing static pages immediately (via helper scripts), while planning the full rebuild.

## Pages (13 total)

8 existing + 5 new:
- Dashboard, Servers, Backups, Network, Services, Cron Jobs, Logs, Config
- **New:** Customer Management, Billing/Finance, Users/RBAC, Audit Log, Settings

## Actions per page

Each page should offer actions, not just views:
- Restart a service
- Trigger/restore backups
- Add DNS records
- Reboot routers
- Create customers
- Provision services
- Create tickets

## RBAC

- Owner/Admin: everything
- Tech/Support: tickets, server status, service restarts
- Sales/Onboarding: customer activation, provisioning
- Viewer: read-only

## Integrations Roadmap

- **Connected:** SyncroMSP, Cloudflare, Hetzner, netcup, Wasabi, admin-ai
- **Pending:** RingLogix (phone), Stripe (billing), Xero (accounting), UniFi (API key saved), Hudu, RunCloud

## Implementation Phases

1. Action buttons on existing pages, VPN monitor widget
2. Backend development (FastAPI + SQLite for audit)
3. Customer management module
4. RBAC + multi-user support
5. Polish (Grafana dashboards, notifications, mobile)