:00Thu 24 Sep

System

4 need you · snapshot 14:30 verified

About Health & snapshots

Health & snapshots shows this server, the site it serves, where each snapshot goes and who each health alert reaches.

The host

The server's name, certificate, time source, ports and addresses belong to the host. Plant IT changes them on this computer with the Janus Service CLI; this page shows what the host has.

Snapshots

Janus takes a snapshot every 15 minutes while the site is in use, reads it back on this host and copies it off the host. The newest verified snapshot and the pre-update snapshots of the last two updates are never pruned. Licence files are never in a snapshot.

A restore

Restoring a snapshot is a Janus Service CLI step a maintenance-group member runs. Janus then starts in recovery mode, and Recovery lists what to finish.

Needs you

Site

janus-smt-line2

Online · PostgreSQL OK
Version
Janus 0.9.4
Host
Windows Server 2022
Running for
6 d 4 h · since Thu 18 Sep
Database
PostgreSQL 16 · 164 MB · 212 GB free
Background jobs
6 of 6 running

Snapshots

How snapshots are kept

A snapshot every 15 minutes while the site is in use, read back on this host, then copied off it. The interval is a value on Policies.

The newest verified snapshot and the pre-update snapshots of the last two updates are never pruned. Licence files are never in a snapshot.

Restoring one is a Janus Service CLI step; Janus then starts in recovery mode. How a restore runs

Latest snapshot
14:30 · verified
Off-host copy
Verified 14:30
Stock export
Full stock 14:00 Exports
  1. Janus dataPostgreSQL 16 · database janusA snapshot every 15 min
  2. Verified on this hostD:\janus\snapshotsRead back and verified
  3. Copied off the host\\fileserver\smt\januswith its own share credential, never the host’s account
Latest snapshots
TodaySizeOn this hostOff-host copy
14:30164 MBVerifiedVerified 14:30
14:15164 MBVerifiedVerified
14:00163 MBVerifiedVerified
13:45163 MBVerifiedVerified

Site transition

Cut over Mon 1 Sep · go/no-go 2 by Eszter Szabó 15:10 · rollback window closed 22:00

Cut over Mon 1 Sep: go/no-go 2 by Eszter Szabó at 15:10 · whole host, every rack.

  1. Prepare (done)
  2. Go/no-go 1 (done)
  3. Freeze and archiveDanutek’s record (done)
  4. Hand-over and commissioning (done)
  5. Re-put (done)
  6. Go/no-go 2 (done)
  7. First shiftrollback until 22:00 (done)

Prepare

Danutek site template · re-entered, never imported
PrepareDone · 10 of 10
  • Done
    Time and certificate
    Set in the Janus Service CLI · Europe/Budapest from ntp.danutek.local · Danutek plant CA certificate
    Gábor Szabó
  • Done
    Snapshots copied off this computer
    \\fileserver\smt\janus · dedicated share credential · verified 14:30
    Gábor Szabó
  • Done
    Recovery code sealed
    Created at the first sign-in, Mon 1 Sep 11:20 · sealed in the site safe, Office 2
    Eszter Szabó
  • Done
    Rack port set on the host
    en5 · 192.168.0.0/24 · set in the Janus Service CLI by plant IT
    Gábor Szabó
  • 3 of 3
    Racks drafted from the Danutek site template
    SR-01, SR-02, SR-03 qualified and in service · SR-04 being commissioned now
    Dávid Horváth
  • 2 of 2
    Stations bound to a rack
    Station SMT-2 at SR-01 · Station SMT-1 at SR-03
    Eszter Szabó
  • 2 of 2
    Handhelds enrolled
    PDA-03, PDA-04 · enrolled by QR through MDM
    Gábor Szabó
  • 12 of 12
    People who can sign in
    10 by badge · 2 by passcode only
    Eszter Szabó
  • Done
    Parts imported
    ERP parts · last import Mon 22 Sep
    Olena Kovalenko
  • 9 of 9
    Supplier labels read
    One label per supplier checked Mon 1 Sep
    Eszter Szabó
  • Before the first shift

    1 of 2 done
  • Done
    Recovery kit kept off-host
    Licence file, site certificate material and the share credential · Office 2 safe
    Gábor Szabó
  • 2 of 4
    Server alerts reach IT
    Disk and server-port alerts still go to Eszter Szabó
    Gábor Szabó
  • Later

    2 of 3 done · deferred with a date
  • 3 of 4 on
    Integrations
    IMS ReelSaveIn is a draft · each starts from now on
    Eszter Szabó
  • Accepted
    Policies and tower lights reviewed
    Strict preset · version 14 · published by Eszter Szabó
    Eszter Szabó
  • Perpetual
    Licence
    Revision 3 · export and snapshots are never gated
    Eszter Szabó

Go/no-go 1

Recorded

Go · go/no-go 1

Decided by
Eszter SzabóSupervisor · signed in by name
When
Mon 1 Sep 06:10
Latest rollback start
20:30
Reference
EV-2104
  • Ready Host checks and host OS
  • Ready Label format published
  • Ready MES lookup answers
  • Ready Named supervisors
  • Ready Licence imported, a rack free
  • Ready Site certificate trusted on every device
  • Ready Snapshot copied off the host
  • Ready Recovery kit checked

Freeze and archive

Outside Janus

The old-system owner stops movements, takes the final database copy and full stock export (classified secret, checksums), disables the old service’s automatic start and updater, and rotates the MES credentials. Danutek’s transition record TR-SMT2-2026-01 holds it; Janus reads no archive.

Hand-over and commissioning

One owning connection per controller
  • In service
    SR-01 · Reel rack A
    Adopted at its own address · qualified as a whole by follow-the-light
  • In service
    SR-02 · High-capacity rack B
    Adopted at its own address · qualified as a whole by follow-the-light
  • In service
    SR-03 · Line-side rack C
    Adopted at its own address · qualified as a whole by follow-the-light
  • Commissioning
    SR-04 · Line-side rack D
    Occupied rack, no clearing: baseline, follow the light, put in service

Re-put

Nothing left
  • None left
    SR-01
    Every bay that reads a reel has a record
  • None left
    SR-02
    Every bay that reads a reel has a record
  • None left
    SR-03
    Every bay that reads a reel has a record
  • None left
    SR-04
    Every bay that reads a reel has a record

Go/no-go 2 · the go-live check

Recorded

Go · go/no-go 2

Decided by
Eszter SzabóSupervisor · signed in by name
When
Mon 1 Sep 15:10
Reference
EV-2161
  • Ready Racks qualified and in service
  • Ready One put-in, sensor-confirmed
  • Ready One take-out
  • Ready Cancel issue: the reel put back
  • Ready One scan-time lookup
  • Ready One stock export written
  • Ready Every tower shows healthy

First shift

Rollback window until 22:00

The rollback window closed Mon 1 Sep 22:00, at the end of the first shift. After it, a defect is bridged by manual operation of the affected scope until a forward fix lands as a patch release: gated on an 8–12 h soak, the 72 h soak completed afterwards.

Health alerts

Where health alerts go

Server alerts go to plant IT on-call; floor alerts go to the supervisor on duty, otherwise the site administrator by SMS. Email, SMS and Teams are set in Integrations; each person’s optional notices in My settings.

  • To plant IT on-call · Gábor Szabó · email

  • Off-host snapshot copy failingOn

    Last: Mon 22 Sep 10:03 · verified again 10:15Email to Gábor Szabó 10:04opened 10:06

  • Certificate expires in 30 daysOn

    Not raised · valid to Fri 17 Sep 2027

  • Disk below 10 GB freeGoes to Eszter Szabó

    Not raised · 212 GB free

  • Server port changedGoes to Eszter Szabó

    USB Ethernet en7 plugged in 13:50Email to Eszter Szabó 13:51not opened

  • To the shift · supervisor on duty, otherwise Eszter Szabó by SMS

  • Messages piling upOn

    Counter ReelSave · 12 waiting since 13:48Nobody on Shift B holds “Resend failed messages”Email to Eszter Szabó 13:50not taken over

  • Rack sensors not reportingOn

    SR-02 tier 3 since 09:41SMS to Katalin Horváth 09:41opened 09:44taken over by Bence Tóth 14:02

  • Controller offlineOn

    None nowSMS to the supervisor on duty——

Plant monitoringHealth address · syslog off
  • Health address
    https://janus-smt-line2.local:8443/health · answers OK or Not OK with the failing check · no site data
  • SyslogOff
    Sends every health alert to syslog.danutek.local:514 as well.

Server and support

This serverIn sync · set in the Janus Service CLI
  • Name
    janus-smt-line2.local on the office network · DNS name not set
  • Certificate
    Janus site CA · each device trusts it onceFor janus-smt-line2.local · valid to Wed 23 Sep 2027. A device trusts it once, by QR code or the download page; phones without it can’t use the camera.
  • Time
    In sync · Europe/Budapest (CEST, UTC+02:00) · from ntp.danutek.local · off by 0.2 s
  • Addresses
    Office en0 · 192.168.10.24/24Rack port en5 · 192.168.0.253 · rack subnet 192.168.0.0/24 · no DHCP, no routing
  • Host
    Windows Server 2022 · PostgreSQL 16 · maintenance group: Gábor Szabó

Owner Gábor Szabó · plant IT

Change a host setting

Plant IT runs these on this computer.

janus-service host show
janus-service host set --ntp ntp.danutek.local
janus-service ports set en5 --use racks --pool 192.168.0.20-39
janus-service cert import plant-ca.pfx
Version and updatesJanus 0.9.4 · Signed
  • Janus 0.9.4
    Updated Thu 18 Sep 06:10 by Gábor Szabó (maintenance group) · pre-update snapshot kept
    Signed · SBOM
  • Update rollback
    Ended: commands were admitted after the pre-update snapshot. A defect now gets a forward fix, as a patch release where it is narrowly scoped.
    Not available
  • Patch releases
    Narrowly scoped fixes: the same signing, checks and suites as a full release, gated on an 8–12 h soak; the 72 h soak follows.
    None waiting
Phone access2 phones paired · office network

Phones need a secure link on a network the host serves Janus on. Who may scan with a phone is set per person in People.

This computerjanus-smt-line2
  • Office network en0 · 192.168.10.24OnPrivate network · stations, handhelds, phones and office PCs
  • Wi-Fi not connectedOffPublic network when connected
  • Rack network en5 · 192.168.0.253Racks onlyControllers only. Phones are never allowed here.
On a phone on the office network, open https://janus-smt-line2.local:8443 or https://192.168.10.24:8443 if the name does not work
2 phones paired
IT sheetHanded over Mon 1 Sep · 1 open item
  • Before installing Janus
    Windows host, ports, addresses, name, certificate, firewall, time, Wi-Fi, the off-host share · what Janus needs, blank for IT to fill in
  • IT handover sheet
    Every value read from this server now · 1 open item: line counter refused on port 9443
Diagnostics bundles2 saved · 1 not sent

Logs, health, versions and configuration for Danutek or Perpixel support, without secrets; people appear as stable pseudonyms. When Janus can’t start, the Janus Service CLI collects one.

  • Health, rack checks
    Fri 19 Sep, 11:04 · Eszter Szabó · 118 KB
    Sent to vendor support · 11:06
  • Health
    Tue 9 Sep, 16:40 · Dávid Horváth · 41 KB
    Kept on this computer · not sent
RetentionActivity and receipts kept for good · cleanup every 6 h
Retention by record type
RecordsKeepsHolding nowLast cleanup
Activity logFor good58 213Never trimmed · from Mon 1 Sep
Receipts, including rejected take-out requestsFor good4 811Never trimmed
Scanner diagnostics500 runs500Trimmed 18 not linked to anything
Rack health samples7 days120 960Trimmed 4 320 older than Wed 17 Sep
Message bodies sent to connected systems the message record itself stays30 days2 406Nothing to trim
Import files full files for the newest 32; the import record stays32 files32Nothing to trim

Last cleanup 12:14 · next 18:14

Technical details
Database
PostgreSQL 16 · database janus on janus-smt-line2
Background jobs
Controller connection 3 of 4 · integration deliveries · cleanup · snapshots every 15 min · off-host copy · health alerts (every 30 s)
Job
retention-cleanup · every 6 h
Retention version
3

Alerts

Faults and blocked work stay here until fixed. Notices can be cleared.

SR-02 is limited

Bence Tóth is on itsince 09:41 · 4 h 51 min14:30 installation map v4 drafted by Dávid Horváth under permit · waiting to be applied

Tier 3, bays 1–16 are Unknown. Blocks 2 take-outs for WO-260714-09 and hides 310 pcs of PN-QFN32-MCU7. The rest of SR-02 works.

Troubleshoot SR-02Stays until fixed

Label not recognised

A Würth Elektronik label matched no code rule.

Put-in not finished

Reel R-2026-0109 is waiting for the sensor at SR-01-T4-L31: finish putting it in, or cancel.

Counter ReelSave is failing

Owner: line counter vendorsince 13:48

12 messages waiting. SMT Line 2 counters don't know about reels taken out since 13:48.

Snapshot taken · 14:30

Verified · off-host copy 14:30. Snapshots every 15 min while Janus is busy.

Choose working rack

Scans and bay lights on this station use the working rack. Opening another rack never switches it.

Racks

Help

What the words mean

Language

Applies to this station only. Records keep the words they were written in.

Create diagnostics bundle

Preview every part first. Saved under exports\diagnostics; sending is a separate step.

What goes in the file

Exact contents · 6 files · 70 KB

Support file contents
FileSizeSHA-256
health/health.json4.1 KB9f2c…a41e
health/jobs.json7.9 KB1b07…c3d2
racks/controllers.json18.4 KBe6aa…0917
racks/self-test.json22.0 KB74d1…5bb8
racks/sensor-gaps.json16.2 KB cut at 64 KB30fe…d6c1
manifest.json1.4 KBc8e0…2f7a

Left out: secrets (passcodes, badge codes, API keys, the recovery code), barcode contents and claimed-operator values. People appear as stable pseudonyms (P-07).

Before installing Janus

Pre-flight sheet for plant IT · print it before install day

What Janus needs and what it is set to
ItemJanus needs
Server
ComputerWindows 11 or Windows Server 2019–2025, 4 cores, 8 GB memory, disk for snapshots, on a UPS
PortsTwo wired ports: office network and a rack switch (isolated is recommended)
Office addressA fixed address on the office network
Rack networkIts own subnet, used nowhere else · no DHCP, no routing · set with the Janus Service CLI
Name, certificate, time
NameA DNS name if phones or handhelds use another network
CertificateThe Janus site CA the Service CLI creates, or the site’s own certificate
TimeAn NTP server this computer can reach
Accounts and devices
Off-host snapshotsA network folder and a dedicated share credential (never the host’s computer account), or the host’s own tooling pulls the copy
MES loginRead-only SQL login
HandheldsWi-Fi that reaches the office network · MDM for the enrolment QR
StationsA kiosk browser opening Janus with the station’s pairing code
MonitoringOptional: poll the health address, receive syslog

Firewall

Firewall openings
DirectionHostPortFor
InFrom office networks8443/tcpStations, handhelds, phones
Outsmtp.danutek.local587/tcpAlert email
Outsms-gw.danutek.local443/tcpAlert SMS
Outfileserver445/tcpOff-host snapshots
Outntp.danutek.local123/udpTime
Outsap-gw.danutek.local443/tcpSAP goods receipt
Outmes-sql011433/tcpMES work orders
Out10.20.0.59443/tcpLine counter
Racken5 only502/tcpRack controllers, Modbus

IT handover sheet

Read from janus-smt-line2 at 14:32 · owner Gábor Szabó, plant IT

What Janus needs and what it is set to
ItemJanus needsSet to now
Server
ComputerWindows 11 or Windows Server 2019–2025, 4 cores, 8 GB memory, disk for snapshots, on a UPSWindows Server 2022 · 212 GB free · on UPS
PortsTwo wired ports: office network and a rack switch (isolated is recommended)en0 office · en5 rack, switch port P24
Office addressA fixed address on the office network192.168.10.24/24
Rack networkIts own subnet, used nowhere else · no DHCP, no routing · set with the Janus Service CLI192.168.0.0/24 · server 192.168.0.253
Name, certificate, time
NameA DNS name if phones or handhelds use another networkjanus-smt-line2.local · DNS name not set
CertificateThe Janus site CA the Service CLI creates, or the site’s own certificateDanutek plant CA · to Fri 17 Sep 2027
TimeAn NTP server this computer can reachntp.danutek.local · off by 0.2 s
Accounts and devices
Off-host snapshotsA network folder and a dedicated share credential (never the host’s computer account), or the host’s own tooling pulls the copy\\fileserver\smt\janus · dedicated share credential
MES loginRead-only SQL loginjanus_mes_read on mes-sql01
HandheldsWi-Fi that reaches the office network · MDM for the enrolment QRPDA-03, PDA-04 enrolled
StationsA kiosk browser opening Janus with the station’s pairing codeStation SMT-1, Station SMT-2
MonitoringOptional: poll the health address, receive syslog/health · syslog off

Firewall

Firewall openings
DirectionHostPortForNow
InFrom office networks8443/tcpStations, handhelds, phonesOpen
Outsmtp.danutek.local587/tcpAlert emailWorking
Outsms-gw.danutek.local443/tcpAlert SMSWorking
Outfileserver445/tcpOff-host snapshotsWorking
Outntp.danutek.local123/udpTimeWorking
Outsap-gw.danutek.local443/tcpSAP goods receiptWorking
Outmes-sql011433/tcpMES work ordersWorking
Out10.20.0.59443/tcpLine counterRefused since 13:48
Racken5 only502/tcpRack controllers, Modbus4 controllers

Handover: Gábor Szabó to Eszter Szabó. Owners, expiry dates and the open item above print with the sheet.

Set up a phone

For people allowed to scan with a phone. Handhelds enrol in Equipment.

  1. Join the office networkWired office network or the office Wi-Fi. Never the rack network.
  2. Open JanusScan the QR on this page, or type https://janus-smt-line2.local:8443.
  3. Trust the certificate, onceOnly on phones that don’t already trust the Danutek plant CA, such as personal phones. The trust profile installs the plant CA; it is valid to Fri 17 Sep 2027.

Paired phones

  • Dávid Horváth’s phone
    Paired 14:19 · Danutek technician account
  • Bence Tóth’s phone
    Paired Mon 22 Sep · last used 14:05

Prototype

Health & snapshots · System

Preview stateCertificate · Janus site CA

View as

This page

Purpose
The site in miniature, snapshots and the off-host copy, the site transition.
Release
R1
First viewport
1 primary · 1 notice · 3 blocks