All accounts & their access
Green = hub accounts (Quotation / SLD / PMA — one login, role-based access). Red = HR site logins. Orange = external systems (managed at their own portals — Cloudflare, GitHub, HDMS).
| Account | Apps & domains | Role / 2FA | Actions |
|---|
Add account
HR accounts get username + optional 2FA. Hub accounts use email — one login for all hub apps.
Role = department. App access is set per-app in Apps panel.
Generates a QR for Google Authenticator
Managed apps — registry
Grouped by department (locked v4 layout). The level tag (junior/senior/admin) is the intended access floor — advisory until each app enforces it; access lists already hide tiles and gate HR.
These are the apps staff can open. Add a new app here and it appears everywhere — no redeploy needed. Removed apps stop being managed.
SALES & MARKETING
| App | URL | Access | Type / Level | Perms | Actions |
|---|
WORKSHOP — service, parts, PMA, SLD
| App | URL | Access | Type / Level | Perms | Actions |
|---|
FINANCE & ADMIN — senior
| App | URL | Access | Type / Level | Perms | Actions |
|---|
SYSTEM — you only
| App | URL | Access | Type / Level | Perms | Actions |
|---|
Reference map — all apps & systems
Full inventory (verified 24 Aug 2026): every subdomain + VPS service + external system. Green = hub accounts · Red = HR logins · Orange = external/VPS.
| App | URL | Who has access | Passwords at |
|---|---|---|---|
| SSME Hub (main portal) | ssmehub.com | — | Managed here (green accounts) |
| Quotation | quotation.ssmehub.com | — | Managed here (green accounts) |
| SLD Desk | sld.ssmehub.com | — | Managed here (green accounts) |
| PMA | pma.ssmehub.com | — | Managed here (green accounts) |
| Customers | customers.ssmehub.com | — | Managed here (green accounts) |
| HR Portal | hr.ssmehub.com | — | Managed here (red accounts) |
| Admin (this page) | admin.ssmehub.com | soonseng jason | 2FA required for soonseng |
| 5S | 5s.ssmehub.com | workshop staff verify | 1Password: verify |
| OCR | ocr.ssmehub.com | soonseng / jason | 1Password: verify |
| Parts | parts.ssmehub.com | parts staff verify | 1Password: verify |
| Share | share.ssmehub.com | verify | 1Password: verify |
| Cashflow | cashflow.ssmehub.com | soonseng / jason | 1Password: verify |
| Finance | finance.ssmehub.com | selected staff verify | 1Password: verify |
| Leadgen | leadgen.ssmehub.com | soonseng / jason | 1Password: verify |
| Reminder | reminder.ssmehub.com | verify | 1Password: verify |
| Router | router.ssmehub.com | soonseng / jason | 1Password: verify |
| WA Monitor | wa.ssmehub.com | soonseng only — STAFF MUST NOT KNOW | 1Password: WA monitor token |
| WA backend (VPS) | docker: ssme-wa-evolution | soonseng / jason (SSH) | 1Password: verify |
| Debtor Chase | VPS: chase-app + debtor-app + /debtor/ask | soonseng / jason | 1Password: verify |
| Appointment Board | VPS: ssme-board-api (:8096) | verify | 1Password: verify |
| Reminder Funnel | reminder.ssmehub.com | verify | 1Password: verify |
| MAA | VPS nginx: ssme-maa (domain verify) | verify | 1Password: verify |
| Finance | finance.ssmehub.com | selected staff verify | 1Password: verify |
| NocoDB | VPS: /opt/nocodb (domain verify) | soonseng / jason | 1Password: verify |
| Auth Gate (JWT) | VPS: supa-auth-check (:8092) | internal | Validates Supabase JWT for webapps |
| WA QR page | VPS: ssme-wa-qrpage (:8087) | soonseng / jason | Re-pair QR (staff device re-link) |
| VPS Hermes | VPS: hermes-gateway + hermes-dashboard | soonseng / jason (SSH) | 1Password: SSME VPS |
| Lead Engine | VPS: /root/repos/ssme-lead-engine | soonseng / jason | 1Password: verify |
| Video Studio | VPS: ssme-video-studio + MoneyPrinterTurbo | soonseng / jason | 1Password: verify |
| SQL Server (office PC) | sql-server-pc.ssmehub.com | tunnel — soonseng | Firebird 3050 via office-sql-tunnel |
| SSME LEDGER (finance) | worker: ssme-ledger-frontend (belum domain) | selected staff verify | 1Password: SSME LEDGER |
| HDMS (Hino) | external portal — FUTURE: SSME dashboard app (progress overview) | siti planned: hub login + perms | 1Password: HDMS Staff Login — SITI |
| Cloudflare | dash.cloudflare.com | soonseng…gmail.com | 1Password: Cloudflare Global API Key |
| GitHub | github.com | JasonSSKB SSMEHub org | 1Password: GitHub Token (JasonSSKB) |
| Supabase | supabase.com | soonseng…gmail.com | 1Password: SUPABASE_URL + SERVICE_ROLE_KEY |
| VPS (152.42.242.26) | docker: wa-evolution, wa-pg, flaresolverr | soonseng / jason (SSH) | 1Password: SSME VPS |
| 1Password | 1password.com | teckchuan | Vault: SSME HINO Trucks — API Keys |
| Obsidian vault | — | teckchuan | Local: ~/Obsidian-Vault |
| SSME Brain (git) | SSMEHub/ssme-brain | SSMEHub org | Read before any SSME work (GLOBAL.md) |
| TencentDB agent memory | — | VPS Hermes only | 1Password: TencentDB keys |
Audit — recent actions
Shows the last 20 actions. Entries older than 30 days auto-expire.
| When | Who | Action | IP |
|---|