landfall 0.1.0 → 0.3.0

package/dist/index.html

@@ -32,6 +32,8 @@ button {
   padding: 5px 11px; border-radius: 7px; cursor: pointer; white-space: nowrap;
 }
 button:hover { border-color: var(--faint); }
+button:focus-visible, a:focus-visible { outline: 2px solid var(--accent); outline-offset: 1px; }
+button.primary:hover { filter: brightness(1.08); }
 button:disabled { opacity: .5; cursor: default; }
 button.primary { background: var(--accent); border-color: var(--accent); color: #fff; }
 button.danger { color: var(--bad); }
@@ -46,26 +48,37 @@ input.secret { -webkit-text-security: disc; text-security: disc; }
 input:focus, select:focus, textarea:focus { outline: 2px solid var(--accent-bg); border-color: var(--accent); }
 textarea { font-family: var(--mono); font-size: 12.5px; min-height: 90px; }
 
-.app { display: grid; grid-template-columns: 250px 1fr; grid-template-rows: 52px 1fr; height: 100vh; }
-.app.with-job { grid-template-columns: 250px 1fr minmax(380px, 40%); }
+.app { display: grid; grid-template-columns: 250px minmax(0, 1fr); grid-template-rows: 52px 1fr; height: 100vh; }
+.app.with-job { grid-template-columns: 250px minmax(0, 1fr) minmax(380px, 40%); }
 header { grid-column: 1 / -1; display: flex; align-items: center; gap: 12px; padding: 0 16px; border-bottom: 1px solid var(--line); background: var(--panel); }
-.brand { font-weight: 700; font-size: 16px; display: flex; align-items: center; gap: 8px; }
-.brand small { font-weight: 400; color: var(--faint); font-size: 12px; }
+.brand { font-weight: 700; font-size: 16px; display: flex; align-items: center; gap: 8px; letter-spacing: -.01em; color: var(--text); }
+.brand:hover { text-decoration: none; }
+.brand svg { width: 22px; height: 22px; flex: none; }
+.brand small { font-weight: 400; color: var(--faint); font-size: 12px; letter-spacing: 0; }
 .project { margin-left: auto; display: flex; align-items: center; gap: 8px; color: var(--dim); font-size: 13px; min-width: 0; }
 .project .path { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; max-width: 36vw; }
-nav.servers { border-right: 1px solid var(--line); background: var(--panel); overflow: auto; padding: 10px 8px; }
-nav h3 { margin: 6px 8px 6px; font-size: 11px; text-transform: uppercase; letter-spacing: .06em; color: var(--faint); font-weight: 600; }
-.srv { display: block; width: 100%; text-align: left; border: 0; background: none; padding: 7px 10px; border-radius: 7px; }
-.srv:hover { background: var(--bg); }
+nav.servers { border-right: 1px solid var(--line); background: var(--panel); overflow: auto; display: flex; flex-direction: column; }
+.nav-top { position: sticky; top: 0; z-index: 1; background: var(--panel); display: flex; gap: 6px; padding: 10px 10px 6px; }
+.nav-top input { padding: 5px 9px; font-size: 13px; }
+.nav-top button { flex: none; }
+#navlist { padding: 0 8px 12px; }
+nav h3 { margin: 10px 8px 4px; font-size: 11px; text-transform: uppercase; letter-spacing: .06em; color: var(--faint); font-weight: 600; display: flex; justify-content: space-between; }
+nav h3 span { font-weight: 500; letter-spacing: 0; }
+.srv { display: block; width: 100%; text-align: left; border: 0; background: none; padding: 6px 10px; border-radius: 7px; }
+.srv:hover { background: var(--bg); border-color: transparent; }
 .srv.on { background: var(--accent-bg); }
+.srv.on .n { color: var(--accent); }
 .srv .n { font-weight: 600; display: flex; align-items: center; gap: 6px; }
-.srv .t { color: var(--dim); font-size: 12px; overflow: hidden; text-overflow: ellipsis; }
+.srv .t { color: var(--dim); font-size: 12px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.nav-none { color: var(--faint); font-size: 12.5px; padding: 6px 10px; }
 .star { color: var(--warn); font-size: 11px; }
 main { overflow: auto; padding: 20px 24px 40px; min-width: 0; container-type: inline-size; }
+.show-sm { display: none !important; }
 /* By main's own width, so an open job panel squeezes the tables like a small screen does. */
 @container (max-width: 720px) {
   td, th { padding: 8px; }
   .hide-sm { display: none; }
+  .show-sm { display: flex !important; }
 }
 .empty { color: var(--dim); text-align: center; padding: 60px 20px; }
 .empty h2 { color: var(--text); font-size: 18px; margin: 0 0 6px; }
@@ -73,13 +86,46 @@ main { overflow: auto; padding: 20px 24px 40px; min-width: 0; container-type: in
 .head h1 { margin: 0; font-size: 22px; }
 .head .sub { color: var(--dim); font-size: 13px; margin-top: 2px; }
 .actions { display: flex; flex-wrap: wrap; gap: 6px; margin-left: auto; }
-.tabs { display: flex; gap: 2px; border-bottom: 1px solid var(--line); margin-bottom: 16px; }
-.tabs button { border: 0; border-bottom: 2px solid transparent; border-radius: 0; background: none; padding: 8px 12px; color: var(--dim); }
+.tabs { display: flex; gap: 2px; border-bottom: 1px solid var(--line); margin-bottom: 16px; overflow-x: auto; scrollbar-width: none; }
+.tabs::-webkit-scrollbar { display: none; }
+.tabs button { border: 0; border-bottom: 2px solid transparent; border-radius: 0; background: none; padding: 8px 12px; color: var(--dim); flex: none; }
+.tabs button:hover { color: var(--text); }
 .tabs button.on { color: var(--text); border-bottom-color: var(--accent); font-weight: 600; }
-.card { background: var(--panel); border: 1px solid var(--line); border-radius: 10px; box-shadow: var(--shadow); }
+.card { background: var(--panel); border: 1px solid var(--line); border-radius: 12px; box-shadow: var(--shadow); }
 .card + .card { margin-top: 16px; }
-.card > h2 { margin: 0; padding: 12px 16px; font-size: 14px; border-bottom: 1px solid var(--line); display: flex; align-items: center; gap: 10px; }
+.card > h2 { margin: 0; padding: 12px 16px; font-size: 14px; border-bottom: 1px solid var(--line); display: flex; flex-wrap: wrap; align-items: center; gap: 6px 10px; }
 .card > h2 .actions { font-weight: 400; }
+.card > h2 .sub { font-weight: 400; color: var(--dim); }
+.card > .lede { padding: 10px 16px; color: var(--dim); font-size: 13px; border-bottom: 1px solid var(--line); }
+
+/* "⋯" menus: one floating list at a time, placed by openMenu(). */
+button.more { padding-inline: 7px; letter-spacing: .05em; }
+.menu { position: fixed; z-index: 30; min-width: 180px; background: var(--panel); border: 1px solid var(--line); border-radius: 10px; box-shadow: var(--shadow); padding: 4px; display: grid; }
+.menu button { border: 0; background: none; text-align: left; padding: 6px 10px; border-radius: 6px; display: flex; justify-content: space-between; gap: 16px; }
+.menu button:hover, .menu button:focus-visible { background: var(--bg); outline: none; }
+.menu button.danger:hover { background: var(--bad-bg); }
+.menu button .k { color: var(--faint); font-family: var(--mono); font-size: 11.5px; }
+.menu hr { border: 0; border-top: 1px solid var(--line); margin: 4px 2px; }
+
+.home { max-width: 860px; margin: 0 auto; padding-top: 20px; }
+.home h1 { margin: 0 0 4px; font-size: 22px; }
+.home > p { color: var(--dim); margin: 0 0 20px; }
+.grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(220px, 1fr)); gap: 12px; }
+.tile { display: block; text-align: left; padding: 14px 16px; border-radius: 12px; background: var(--panel); border: 1px solid var(--line); box-shadow: var(--shadow); width: 100%; }
+.tile:hover { border-color: var(--accent); }
+.tile .n { font-weight: 600; font-size: 15px; display: flex; align-items: center; gap: 6px; }
+.tile .t { color: var(--dim); font-size: 12.5px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.tile.add { border-style: dashed; box-shadow: none; color: var(--dim); display: grid; place-items: center; min-height: 64px; }
+.cli { margin-top: 28px; padding: 14px 16px; border-radius: 12px; border: 1px solid var(--line); background: var(--panel); font-size: 13px; color: var(--dim); }
+.cli pre { margin: 8px 0 0; font: 12.5px/1.6 var(--mono); color: var(--text); white-space: pre-wrap; }
+.cli pre span { color: var(--faint); }
+
+.drow { display: flex; flex-wrap: wrap; align-items: flex-start; gap: 8px 16px; padding: 10px 0; border-bottom: 1px solid var(--line); }
+.drow:first-child { padding-top: 0; }
+.drow > div:first-child { flex: 1 1 260px; min-width: 0; }
+.drow .actions { flex: none; }
+.site-name { display: flex; align-items: center; gap: 2px; white-space: nowrap; }
+td .chips.show-sm { margin-top: 4px; }
 .card .body { padding: 12px 16px; }
 table { border-collapse: collapse; width: 100%; }
 th { text-align: left; font-weight: 600; font-size: 11.5px; color: var(--faint); text-transform: uppercase; letter-spacing: .04em; padding: 8px 12px; border-bottom: 1px solid var(--line); }
@@ -102,11 +148,12 @@ td.acts button { margin-left: 4px; }
 .note { padding: 10px 14px; border-radius: 8px; background: var(--warn-bg); color: var(--warn); margin-bottom: 14px; }
 .note.bad { background: var(--bad-bg); color: var(--bad); }
 .note.info { background: var(--accent-bg); color: var(--accent); }
-.kv { display: grid; grid-template-columns: max-content 1fr; gap: 4px 16px; font-size: 13px; }
+.kv { display: grid; grid-template-columns: max-content 1fr; gap: 4px 16px; font-size: 13px; margin: 0; }
 .kv dt { color: var(--dim); } .kv dd { margin: 0; }
 pre.block { background: var(--bg); border: 1px solid var(--line); padding: 10px 12px; border-radius: 6px; overflow-x: auto; font-size: 12px; margin: 6px 0 0; }
 .detail td { background: var(--bg); }
-.releases { margin: 8px 0 0; padding: 0; list-style: none; }
+.releases, .services { margin: 0; padding: 0; list-style: none; }
+.services li { display: flex; align-items: center; gap: 8px; padding: 2px 0; }
 .releases li { display: flex; align-items: center; gap: 10px; padding: 4px 0; }
 .run { padding: 12px 16px; border-bottom: 1px solid var(--line); }
 .run:last-child { border-bottom: 0; }
@@ -178,11 +225,14 @@ body.dragging::after {
 }
 
 @media (max-width: 1100px) {
-  .app.with-job { grid-template-columns: 220px 1fr; }
+  .app.with-job { grid-template-columns: 220px minmax(0, 1fr); }
   aside.job { position: fixed; inset: 52px 0 0 auto; width: min(560px, 100vw); z-index: 5; box-shadow: var(--shadow); }
 }
 @media (max-width: 760px) {
-  .app, .app.with-job { grid-template-columns: 1fr; grid-template-rows: 52px auto 1fr; }
+  .app, .app.with-job { grid-template-columns: minmax(0, 1fr); grid-template-rows: 52px auto 1fr; }
+  header { padding: 0 12px; gap: 8px; }
+  .brand small { display: none; }
+  .project button { padding: 5px 9px; font-size: 13px; white-space: nowrap; }
   nav.servers { display: none; }
   .server-pick { display: block; padding: 10px 16px 0; }
   main { padding: 14px 16px 40px; }
@@ -194,10 +244,14 @@ body.dragging::after {
 <body>
 <div class="app" id="app">
   <header>
-    <div class="brand">landfall <small id="version"></small></div>
+    <a class="brand" href="#/"><svg viewBox="0 0 16 16" aria-hidden="true"><rect width="16" height="16" rx="4" fill="var(--accent)"/><path d="M4 5h8M4 8h8M4 11h5" stroke="#fff" stroke-width="1.6" stroke-linecap="round"/></svg>landfall <small id="version"></small></a>
     <div class="project" id="project"></div>
   </header>
-  <nav class="servers" id="nav"></nav>
+  <!-- The filter stays put across renders, so typing keeps its focus. -->
+  <nav class="servers" id="nav">
+    <div class="nav-top"><input id="filter" type="search" placeholder="Filter servers" autocomplete="off" spellcheck="false" aria-label="Filter servers"><button type="button" id="add-server" title="Register an ssh alias or set up a fresh machine">+</button></div>
+    <div id="navlist"></div>
+  </nav>
   <div class="server-pick" id="pick"></div>
   <main id="main"></main>
   <aside class="job" id="job" hidden></aside>
@@ -232,6 +286,7 @@ const S = {
   settings: {},          // name -> {data: lf server config --json + dns of the main domain}
   dns: {},               // name -> {data: {ips, domains: [{domain, ips, ok, https}]}}
   open: new Set(),       // expanded site rows
+  filter: "",            // server list filter
   jobs: new Map(),       // id -> {info, lines, after, actions, es}
   job: null,             // shown job id
 };
@@ -266,15 +321,64 @@ function btn(label, fn, cls = "", title = "") {
 }
 document.addEventListener("click", (e) => {
   const el = e.target.closest("[data-k]");
+  const menu = $("#menu");
+  // A click outside an open menu only closes it.
+  if (menu && !e.target.closest("#menu")) {
+    closeMenu();
+    e.preventDefault();
+    return void e.stopPropagation();
+  }
   if (!el || el.disabled) return;
   const fn = handlers.get(el.dataset.k);
   if (fn) {
     e.preventDefault();
     e.stopPropagation();
-    fn(e);
+    fn(e, el);
   }
 });
 
+/**
+ * A "⋯" button for the less used actions. items: [{label, run, cls, title, hint}] or "-" for a divider;
+ * falsy items are skipped. The menu keeps its own handlers, so a render while it is open leaves it working.
+ */
+function menuBtn(items, title = "More actions", cls = "sm") {
+  items = items.filter(Boolean);
+  if (!items.length) return "";
+  return btn("⋯", (e, el) => openMenu(el, items), `${cls} more`, title);
+}
+function openMenu(anchor, items) {
+  closeMenu();
+  const m = Object.assign(document.createElement("div"), { id: "menu", className: "menu" });
+  m.setAttribute("role", "menu");
+  m.innerHTML = items
+    .map((it, i) => it === "-" ? "<hr>" : `<button type="button" role="menuitem" data-i="${i}" class="${it.cls ?? ""}"${it.title ? ` title="${esc(it.title)}"` : ""}><span>${esc(it.label)}</span>${it.hint ? `<span class="k">${esc(it.hint)}</span>` : ""}</button>`)
+    .join("");
+  m.onclick = (e) => {
+    const b = e.target.closest("button[data-i]");
+    if (!b) return;
+    closeMenu();
+    items[b.dataset.i].run();
+  };
+  m.onkeydown = (e) => {
+    const all = [...m.querySelectorAll("button")];
+    const i = all.indexOf(document.activeElement);
+    if (e.key === "ArrowDown" || e.key === "ArrowUp") {
+      e.preventDefault();
+      all[(i + (e.key === "ArrowDown" ? 1 : all.length - 1)) % all.length].focus();
+    }
+  };
+  document.body.append(m);
+  const r = anchor.getBoundingClientRect();
+  m.style.left = `${Math.max(8, Math.min(r.right - m.offsetWidth, innerWidth - m.offsetWidth - 8))}px`;
+  m.style.top = `${r.bottom + 4 + m.offsetHeight > innerHeight - 8 ? Math.max(8, r.top - m.offsetHeight - 4) : r.bottom + 4}px`;
+  $("button", m)?.focus({ preventScroll: true });
+}
+function closeMenu() {
+  $("#menu")?.remove();
+}
+addEventListener("resize", closeMenu);
+document.addEventListener("scroll", closeMenu, true);
+
 // ---- routing: #/<server>/<tab> ---------------------------------------------
 
 function go(sel, tab = S.tab) {
@@ -608,16 +712,16 @@ function passwordFor(args, base) {
 function addServer() {
   dialog({
     title: "Add a server",
-    text: "Use an alias from ~/.ssh/config (like het), or pick a new name and give the machine's address, fresh or already in use. landfall writes the ssh config entry for it.",
+    text: "Use an alias from ~/.ssh/config (like vps), or pick a new name and give the machine's address, fresh or already in use. landfall writes the ssh config entry for it.",
     fields: [
-      { name: "name", label: "Name", placeholder: "het" },
+      { name: "name", label: "Name", placeholder: "vps" },
       { name: "host", label: "IP or hostname (not needed for an ssh alias)", placeholder: "203.0.113.7" },
       {
         legend: "Login (for a new address)",
         fields: [
           { name: "user", label: "User", placeholder: "root" },
           { name: "port", label: "SSH port", placeholder: "22" },
-          { name: "key", label: "Private key file (optional)", placeholder: "~/.ssh/id_ed25519", hint: "Without one, landfall creates ~/.ssh/srv_<name> and installs it with the password." },
+          { name: "key", label: "Private key file (optional)", placeholder: "~/.ssh/id_ed25519", hint: "Without one, landfall creates ~/.ssh/landfall_<name> and installs it with the password." },
           { name: "password", label: "Password (optional)", type: "password", hint: "Used once to install the key, never stored. Leave empty if the key already works." },
         ],
       },
@@ -656,16 +760,17 @@ const tilde = (p) => p.replace(/^\/(Users|home)\/[^/]+/, "~");
 function describe(d) {
   const built = d.build ? ` · builds with <code>${esc(d.build)}</code> first` : "";
   const what =
-    d.kind === "image" ? `Docker image <code>${esc(d.project?.image ?? "")}</code> (from srv.json)`
+    d.kind === "compose" ? `Compose project <code>${esc(d.compose ?? "compose.yaml")}</code>: built and started on the server; x-landfall picks the routed service`
+    : d.kind === "image" ? `Docker image <code>${esc(d.project?.image ?? "")}</code> (from .landfall.json)`
     : d.kind === "dockerfile" ? `Dockerfile: built on the server, served on port ${esc(d.port)}`
     : d.dir ? `Static files from <code>${esc(d.dir === "." ? "./" : d.dir + "/")}</code>${d.spa ? " (single-page app)" : ""}${built}`
     : d.build ? `Static site, built with <code>${esc(d.build)}</code> first`
-    : `<span style="color:var(--warn)">No index.html, Dockerfile or build script here.</span>`;
+    : `<span style="color:var(--warn)">No compose.yaml, Dockerfile, index.html or build script here.</span>`;
   const before = d.project?.server ? ` <span class="dim">· deployed before to ${esc(d.project.server)}</span>` : "";
   return what + before;
 }
 
-/** Deploy a local folder (det from /api/fs or an upload). upload: a temporary folder, so no srv.json. */
+/** Deploy a local folder (det from /api/fs or an upload). upload: a temporary folder, so no .landfall.json. */
 function deployDialog(det, o = {}) {
   const p = det.project;
   const servers = S.state.servers.map((s) => ({ value: s.name, label: s.name }));
@@ -674,7 +779,7 @@ function deployDialog(det, o = {}) {
   const main = mainDomain(target);
   dialog({
     title: `Deploy ${name}`,
-    text: o.upload ? `Uploaded ${plural(o.files ?? 0, "file")}. Not remembered: drop it again to redeploy.` : `From ${tilde(det.path)}${p ? " (settings from srv.json)" : ""}`,
+    text: o.upload ? `Uploaded ${plural(o.files ?? 0, "file")}. Not remembered: drop it again to redeploy.` : `From ${tilde(det.path)}${p ? " (settings from .landfall.json)" : ""}`,
     extra: `<div class="detected">${describe(det)}</div>`,
     fields: [
       { name: "name", label: "Site name", value: name },
@@ -683,7 +788,7 @@ function deployDialog(det, o = {}) {
         name: "domains", label: "Domains", value: (p?.domains ?? []).join(" "),
         placeholder: autoDomain(target, name) || "example.com www.example.com",
         hint: main
-          ? `Empty: <name>.${main}. A bare name like blog means blog.${main}. Other domains need an A record pointing at the server.`
+          ? `Empty: <name>.${main}. A bare name like blog means blog.${main}, @ means ${main} itself (another site serving it hands it over). Other domains need an A record pointing at the server.`
           : "Empty: a free <name>.<ip>.sslip.io address, no DNS needed. Own domains need an A record pointing at the server.",
       },
       ...(det.kind === "static"
@@ -833,6 +938,8 @@ function copy(text) {
   navigator.clipboard?.writeText(text).then(() => toast(`Copied ${text}`), () => toast(text)) ?? toast(text);
 }
 
+const servedByOther = (n, site, d) => S.overview[n]?.data?.sites.find((s) => s.meta.name !== site && s.domains.includes(d))?.meta.name;
+
 function domainsDialog(n, m) {
   const main = mainDomain(n);
   const free = autoDomain(n, m.name);
@@ -842,12 +949,14 @@ function domainsDialog(n, m) {
     text: `Each domain needs an A record pointing at ${ips.join(", ") || "the server"}. Traefik fetches the certificate once it resolves.`,
     fields: [
       { name: "domains", label: "Domains (space separated)", value: m.domains.join(" ") },
+      ...(main && !m.domains.includes(main) ? [{ name: "apex", label: `Also serve ${main}`, type: "check", value: false, hint: servedByOther(n, m.name, main) ? `${servedByOther(n, m.name, main)} serves it now and hands it over.` : "The main domain itself." }] : []),
       ...(free && !m.domains.includes(free) ? [{ name: "free", label: main ? `Also add ${free}` : `Also add the free address ${free}`, type: "check", value: false, hint: main ? `Under the main domain: works once *.${main} points at the server.` : "Works right away, no DNS setup." }] : []),
     ],
     ok: "Save",
     onOk: (v) => {
       const domains = v.domains.split(/[\s,]+/).filter(Boolean);
       if (v.free) domains.push(free);
+      if (v.apex) domains.push(main);
       if (!domains.length) return void toast("A site needs at least one domain"), false;
       run(["domains", m.name, ...sv(n), ...domains.flatMap((d) => ["--set", d]), "-y"], { server: n });
     },
@@ -878,7 +987,7 @@ function authDialog(n, m) {
 
 function ensureDns(n, o) {
   if (S.dns[n] || !o?.sites.length) return;
-  const domains = [...new Set(o.sites.flatMap((x) => x.meta.domains))];
+  const domains = [...new Set(o.sites.flatMap((x) => x.domains))];
   S.dns[n] = { loading: true };
   http(`/api/servers/${encodeURIComponent(n)}/dns?domains=${encodeURIComponent(domains.join(","))}`).then(
     (data) => ((S.dns[n] = { data }), render()),
@@ -933,13 +1042,19 @@ function renderNav() {
   const list = st.servers;
   const own = list.filter((s) => s.registered);
   const aliases = list.filter((s) => !s.registered);
+  const q = S.filter.toLowerCase();
+  const hit = (s) => !q || s.name.toLowerCase().includes(q) || s.target.toLowerCase().includes(q) || s.name === S.sel;
   const item = (s) => `<button type="button" class="srv ${s.name === S.sel ? "on" : ""}" ${on(() => go(s.name, S.sel === s.name ? S.tab : "sites"))}>
       <div class="n">${esc(s.name)}${s.isDefault ? `<span class="star" title="default server">★</span>` : ""}</div>
       <div class="t">${esc(s.target)}</div></button>`;
-  $("#nav").innerHTML = `
-    ${own.length ? `<h3>Servers</h3>${own.map(item).join("")}` : ""}
-    ${aliases.length ? `<h3>From ~/.ssh/config</h3>${aliases.map(item).join("")}` : ""}
-    <div style="padding:10px 8px">${btn("+ Add server", addServer, "", "Register an ssh alias or set up a fresh machine")}</div>`;
+  const group = (title, l) => {
+    const shown = l.filter(hit);
+    return l.length ? `<h3>${title}${q ? `<span>${shown.length}/${l.length}</span>` : ""}</h3>${shown.map(item).join("") || `<div class="nav-none">no match</div>`}` : "";
+  };
+  $("#filter").hidden = list.length < 8;
+  $("#add-server").textContent = list.length < 8 ? "+ Add server" : "+";
+  $("#navlist").innerHTML = `${group("Servers", own)}${group("From ~/.ssh/config", aliases)}
+    ${list.length ? "" : `<div class="nav-none">No servers yet.</div>`}`;
   $("#pick").innerHTML = `<select onchange="go(this.value || null)">
     <option value="">Pick a server…</option>${list.map((s) => `<option value="${esc(s.name)}" ${s.name === S.sel ? "selected" : ""}>${esc(s.name)} · ${esc(s.target)}</option>`).join("")}
   </select>`;
@@ -952,7 +1067,7 @@ function renderHeader() {
   $("#project").innerHTML = `
     <span class="path" title="${esc(st.cwd)}">${p ? `<b>${esc(p.name)}</b> · ${esc(p.domains.join(", "))}` : esc(st.cwd.replace(/^\/(Users|home)\/[^/]+/, "~"))}</span>
     ${btn("Deploy folder…", () => folderDialog(st.cwd), "", "Pick a folder, a recent project, or drop one here")}
-    ${btn(p ? "Deploy" : "Deploy this folder", deployHere, "primary", p ? `lf deploy (srv.json in ${st.cwd})` : `lf deploy from ${st.cwd}`)}`;
+    ${btn(p ? "Deploy" : "Deploy this folder", deployHere, "primary", p ? `lf deploy (.landfall.json in ${st.cwd})` : `lf deploy from ${st.cwd}`)}`;
 }
 
 function errorHint(error) {
@@ -963,7 +1078,8 @@ function errorHint(error) {
 }
 
 const isUp = (status) => /^up/i.test(status);
-const statusDot = (status) => `<span class="dot ${isUp(status) ? (/unhealthy|restarting/i.test(status) ? "warn" : "up") : "down"}"></span>`;
+// A one-off service that finished (Exited (0)) is not down: grey, not red.
+const statusDot = (status) => `<span class="dot ${isUp(status) ? (/unhealthy|restarting/i.test(status) ? "warn" : "up") : /^exited \(0\)/i.test(status) ? "" : "down"}"></span>`;
 
 const size = (b) => {
   const u = ["B", "K", "M", "G", "T"];
@@ -1001,12 +1117,7 @@ function factsNote(n) {
 
 function renderMain() {
   const main = $("#main");
-  if (!S.sel) {
-    main.innerHTML = `<div class="empty"><h2>Pick a server</h2>
-      <p>landfall connects only when you open one. Servers are ssh targets: any ~/.ssh/config alias works.</p>
-      <p>${btn("+ Add server", addServer, "primary")}</p></div>`;
-    return;
-  }
+  if (!S.sel) return void (main.innerHTML = homeView());
   const n = S.sel;
   const s = server();
   const ov = S.overview[n] ?? { loading: true };
@@ -1023,12 +1134,15 @@ function renderMain() {
       <div><h1>${esc(n)}${s?.isDefault ? ` <span class="star" title="default server">★</span>` : ""}</h1><div class="sub">${sub}</div>${factsLine(n)}</div>
       <div class="actions">
         ${btn("Set up / check", () => setupFlow([n]), "", "Shows what is installed and what setup would change; asks before applying")}
-        ${btn("Traefik", () => run(["traefik", "status", ...sv(n)]), "", "lf traefik status")}
-        ${btn("Info", () => run(["server", "info", n]), "", "lf server info")}
         ${btn("Run…", () => runCommand(n), "", "Run a shell command over ssh")}
-        ${s?.isDefault ? "" : btn("Make default", () => makeDefault(n), "ghost")}
-        ${s?.registered ? btn("Forget", () => forget(n), "ghost danger") : ""}
-        ${btn("↻", () => load(n, S.tab, true) || render(), "ghost", "Reload")}
+        ${btn("↻", () => load(n, S.tab, true) || render(), "", "Reload")}
+        ${menuBtn([
+          { label: "Server info", hint: "lf server info", run: () => run(["server", "info", n]) },
+          { label: "Traefik status", hint: "lf traefik status", run: () => run(["traefik", "status", ...sv(n)]) },
+          s?.isDefault ? null : { label: "Make default", title: "Commands without -s use it", run: () => makeDefault(n) },
+          s?.registered ? "-" : null,
+          s?.registered ? { label: `Forget ${n}…`, cls: "danger", hint: "lf server rm", run: () => forget(n) } : null,
+        ], "More", "")}
       </div>
     </div>
     ${factsNote(n)}
@@ -1047,6 +1161,42 @@ function renderMain() {
   else view.innerHTML = historyView(n);
 }
 
+/** No server open: the servers to pick from, and how the same works in a terminal. */
+function homeView() {
+  const list = S.state.servers;
+  const own = list.filter((s) => s.registered);
+  const tile = (s) => `<button type="button" class="tile" ${on(() => go(s.name, "sites"))}>
+      <div class="n">${esc(s.name)}${s.isDefault ? `<span class="star" title="default server">★</span>` : ""}</div>
+      <div class="t">${esc(s.target)}</div></button>`;
+  const def = list.find((s) => s.isDefault)?.name;
+  return `<div class="home">
+    <h1>${own.length ? "Your servers" : "Pick a server"}</h1>
+    <p>landfall connects only when you open one. Servers are ssh targets: any ~/.ssh/config alias works${own.length < list.length ? ` (${list.length - own.length} in the list on the left)` : ""}.</p>
+    <div class="grid">${own.map(tile).join("")}<button type="button" class="tile add" ${on(addServer)}>+ Add server</button></div>
+    <div class="cli">Everything here runs an <span class="mono">lf</span> command, shown above its output, so you can do the same in a terminal:
+      <pre>lf deploy ./dist -d blog <span># a folder, Dockerfile project or image, with HTTPS</span>
+lf ls${def ? "" : " -s <server>"}               <span># sites, and what else Traefik routes</span>
+lf logs blog -f          <span># follow a site's logs</span>
+lf undo                  <span># revert the last change</span>
+lf help                  <span># every command</span></pre></div>
+  </div>`;
+}
+
+/** Containers Traefik routes that landfall did not deploy: shown; Compose projects can be adopted. */
+function othersCard(n, o) {
+  if (!o.others?.length) return "";
+  const links = (e) => e.domains.map((d) => `<span class="chip"><a href="https://${esc(d)}" target="_blank" rel="noopener">${esc(d)}</a></span>`).join("");
+  return `<div class="card scroll"><h2>Not deployed by landfall <span class="badge">${o.others.length}</span></h2>
+    <div class="lede">Containers your Traefik routes, e.g. your own compose projects. Adopting one lists it as a site with logs, restart and stop; it keeps running from its folder.</div>
+    <table><thead><tr><th>Name</th><th class="hide-sm">Domains</th><th class="hide-sm">Folder</th><th></th></tr></thead><tbody>${o.others
+      .map((e) => `<tr><td><div class="site-name">${statusDot(e.status)}<b>${esc(e.name)}</b>&nbsp;<span class="faint">${esc(e.status.toLowerCase())}</span></div>
+          <div class="chips show-sm">${links(e)}</div></td>
+        <td class="hide-sm"><div class="chips">${links(e)}</div></td>
+        <td class="hide-sm mono dim">${esc(e.dir ?? e.containers.join(", "))}</td>
+        <td class="acts">${e.dir ? btn("Adopt…", () => adoptDialog(n, e), "sm", "lf adopt") : ""}</td></tr>`)
+      .join("")}</tbody></table></div>`;
+}
+
 function sitesView(n, o) {
   ensureDns(n, o);
   if (!o.ready) {
@@ -1056,73 +1206,111 @@ function sitesView(n, o) {
   }
   if (!o.sites.length) {
     return `<div class="card"><div class="body empty"><h2>No sites yet</h2>
-      <p>Deploy a static folder, a Dockerfile project or an image. It gets HTTPS automatically.</p>
+      <p>Deploy a folder with a compose.yaml, a Dockerfile, static files, or an image. It gets HTTPS automatically.</p>
       <p>${btn("Deploy a folder…", () => folderDialog(S.state.cwd), "primary")} <span class="dim">or drop one here</span></p>
-      <p class="faint mono">lf deploy ./dist -d example.com -s ${esc(n)}</p></div></div>`;
+      <p class="faint mono">lf deploy ./dist -d example.com -s ${esc(n)}</p></div></div>${othersCard(n, o)}`;
   }
   const rows = o.sites
-    .map(({ meta: m, status }) => {
+    .map(({ meta: m, status, services, domains, main, state, kind }) => {
       const cur = m.releases.find((r) => r.id === m.current);
       const name = m.name;
       const open = S.open.has(`${n}/${name}`);
       const up = isUp(status);
+      const old = state === "old";
+      // Adopted and pre-Compose sites: landfall runs them, it does not deploy them.
+      const managed = state === "managed";
       const older = [...m.releases].sort((a, b) => (a.at < b.at ? 1 : -1)).filter((r) => r.at < (cur?.at ?? ""));
       const proj = (S.state.projects ?? []).find((p) => p.server === n && p.name === name);
+      const deleteSite = () =>
+        confirmDlg({
+          title: m.adopted ? `Stop and forget ${name}?` : `Delete ${name} from ${n}?`,
+          text: m.adopted
+            ? `Runs docker compose down in ${m.adopted}; its files and volumes stay.`
+            : "Stops it and removes its files and releases. Its named volumes (databases, uploads) stay.\nThis cannot be undone.",
+          ok: m.adopted ? `Forget ${name}` : `Delete ${name}`,
+          danger: true,
+          onOk: () => run(["sites", "rm", name, ...sv(n), "-y"]),
+        });
+      const svcMenu = (x) =>
+        menuBtn([
+          { label: "Logs", hint: `lf logs ${name} ${x.service}`, run: () => run(["logs", name, x.service, ...sv(n), "-f"]) },
+          { label: "Restart", hint: "lf restart", run: () => run(["restart", name, x.service, ...sv(n)]) },
+          { label: isUp(x.status) ? "Stop" : "Start", hint: `lf ${isUp(x.status) ? "stop" : "start"}`, run: () => run([isUp(x.status) ? "stop" : "start", name, x.service, ...sv(n)]) },
+        ], `${x.service} of ${name}`, "sm ghost");
       const acts = [
-        proj
+        proj && !m.adopted
           ? btn("Redeploy", () => confirmDlg({ title: `Redeploy ${name}?`, text: `From ${tilde(proj.path)}${proj.kind === "static" ? " (runs its build first, if it has one)" : ""}.`, ok: "Deploy", onOk: () => run(["deploy", "-y", ...sv(n)], { server: n, cwd: proj.path, after: openAfter }) }), "sm primary", `lf deploy in ${proj.path}`)
           : "",
-        btn("Logs", () => run(["logs", name, ...sv(n), "-f"]), "sm", "Follow the container logs"),
-        btn("Restart", () => run(["restart", name, ...sv(n)]), "sm"),
-        btn(up ? "Stop" : "Start", () => run([up ? "stop" : "start", name, ...sv(n)]), "sm"),
-        older.length
-          ? btn("Roll back", () => confirmDlg({ title: `Roll back ${name}?`, text: `From ${m.current} to ${older[0].id} (${ago(older[0].at)})`, ok: "Roll back", onOk: () => run(["rollback", name, ...sv(n), "-y"]) }), "sm")
-          : "",
-        btn("Domains", () => domainsDialog(n, m), "sm", "Add, change or remove domains"),
-        btn(m.auth?.length ? "Login" : "Password", () => authDialog(n, m), "sm", "Protect the site with a user and password"),
-        m.kind === "static" ? "" : btn("Env", () => envDialog(n, name), "sm", "Environment variables"),
-        btn("Delete", () => confirmDlg({ title: `Delete ${name} from ${n}?`, text: "Stops it and removes all its files and releases.\nThis cannot be undone.", ok: `Delete ${name}`, danger: true, onOk: () => run(["sites", "rm", name, ...sv(n), "-y"]) }), "sm danger"),
+        old ? "" : btn("Logs", () => run(["logs", name, ...sv(n), "-f"]), "sm", "Follow the logs of all its services"),
+        menuBtn([
+          old ? null : { label: "Restart", hint: "lf restart", run: () => run(["restart", name, ...sv(n)]) },
+          old ? null : { label: up ? "Stop" : "Start", hint: `lf ${up ? "stop" : "start"}`, run: () => run([up ? "stop" : "start", name, ...sv(n)]) },
+          managed && older.length
+            ? { label: "Roll back…", hint: "lf rollback", title: `To ${older[0].id} (${ago(older[0].at)})`, run: () => confirmDlg({ title: `Roll back ${name}?`, text: `From ${m.current} to ${older[0].id} (${ago(older[0].at)}). Volumes keep their data.`, ok: "Roll back", onOk: () => run(["rollback", name, ...sv(n), "-y"]) }) }
+            : null,
+          "-",
+          main ? { label: "Domains…", hint: "lf domains", run: () => domainsDialog(n, m) } : null,
+          managed ? { label: m.auth?.length ? "Login…" : "Password…", hint: "lf auth", title: "Protect the site with a user and password", run: () => authDialog(n, m) } : null,
+          managed ? { label: "Environment…", hint: "lf env", run: () => envDialog(n, name) } : null,
+          "-",
+          { label: m.adopted ? `Forget ${name}…` : `Delete ${name}…`, cls: "danger", hint: "lf sites rm", run: deleteSite },
+        ], `More for ${name}`),
       ].join("");
       const toggle = () => (open ? S.open.delete(`${n}/${name}`) : S.open.add(`${n}/${name}`), render());
+      const live = m.releases?.find((r) => r.id === m.current);
+      const svcDomains = (svc) => (svc === main ? m.domains : (live?.services?.find((x) => x.name === svc)?.domains ?? []));
       const detail = open
         ? `<tr class="detail"><td colspan="5"><dl class="kv">
-            <dt>Container</dt><dd class="mono">srv-${esc(name)} · ${esc(status)}</dd>
-            <dt>On ${esc(n)}</dt><dd>${siteFiles(m, cur)}</dd>
-            <dt>Source</dt><dd>${proj
-              ? `<span class="mono">${esc(tilde(proj.path))}</span> <span class="dim">· settings in</span> <span class="mono">srv.json</span> <span class="dim">· redeploy runs there</span>`
-              : `<span class="dim">not deployed from this machine${m.kind === "image" ? "" : " (or the folder moved)"}</span>`}</dd>
-            <dt>Kind</dt><dd>${esc(m.kind)}${m.spa ? " (single-page app)" : ""} · port ${esc(m.port)}</dd>
-            <dt>Login</dt><dd>${m.auth?.length ? `${esc(m.auth.map((a) => a.split(":")[0]).join(", "))} (basic auth)` : `<span class="dim">public</span>`}</dd>
+            ${old ? `<dt>Old site</dt><dd class="dim">Deployed before sites were Compose projects: ${proj ? "redeploy it" : `run <span class="mono">lf deploy</span> for it`} once to manage it again.</dd>` : ""}
+            <dt>Services</dt><dd>${services.length
+              ? `<ul class="services">${services.map((x) => `<li>${statusDot(x.status)}<b>${esc(x.service)}</b>${svcDomains(x.service).length ? ` <span class="badge">${esc(svcDomains(x.service).join(" "))}</span>` : ""} <span class="faint">${esc(x.status.toLowerCase())}</span>${old ? "" : svcMenu(x)}</li>`).join("")}</ul>`
+              : `<span class="dim">none running</span>`}</dd>
+            <dt>On ${esc(n)}</dt><dd>${siteFiles(m, state)}</dd>
+            ${m.adopted ? "" : `<dt>Source</dt><dd>${proj
+              ? `<span class="mono">${esc(tilde(proj.path))}</span> <span class="dim">· redeploy runs there</span>`
+              : `<span class="dim">not deployed from this machine${m.kind === "image" ? "" : " (or the folder moved)"}</span>`}</dd>`}
+            <dt>Kind</dt><dd>${esc(kind)}${main || !managed ? "" : ` <span class="dim">· domains set in compose.yaml</span>`}</dd>
+            ${managed ? `<dt>Login</dt><dd>${m.auth?.length ? `${esc(m.auth.map((a) => a.split(":")[0]).join(", "))} (basic auth)` : `<span class="dim">public</span>`}</dd>` : ""}
             <dt>Created</dt><dd>${esc(ago(m.createdAt))} · updated ${esc(ago(m.updatedAt))}</dd>
-            <dt>Releases</dt><dd><ul class="releases">${[...m.releases]
+            ${m.releases.length ? `<dt>Releases</dt><dd><ul class="releases">${[...m.releases]
               .sort((a, b) => (a.at < b.at ? 1 : -1))
-              .map((r) => `<li><span class="mono">${esc(r.id)}</span><span class="dim">${esc(ago(r.at))}</span>${r.image && m.kind === "image" ? `<span class="mono faint">${esc(r.image)}</span>` : ""}
-                ${r.id === m.current ? `<span class="badge ok">live</span>` : btn("Switch to this", () => confirmDlg({ title: `Switch ${name} to ${r.id}?`, text: `Release from ${ago(r.at)} goes live instead of ${m.current}.`, ok: "Switch", onOk: () => run(["rollback", name, ...sv(n), "--to", r.id, "-y"]) }), "sm")}</li>`)
-              .join("")}</ul></dd>
+              .map((r) => `<li><span class="mono">${esc(r.id)}</span><span class="dim">${esc(ago(r.at))}</span>${r.services ? `<span class="faint">${esc(r.services.map((x) => x.name).join(", "))}</span>` : ""}
+                ${r.id === m.current ? `<span class="badge ok">live</span>` : managed ? btn("Switch to this", () => confirmDlg({ title: `Switch ${name} to ${r.id}?`, text: `Release from ${ago(r.at)} goes live instead of ${m.current}. Volumes keep their data.`, ok: "Switch", onOk: () => run(["rollback", name, ...sv(n), "--to", r.id, "-y"]) }), "sm") : ""}</li>`)
+              .join("")}</ul></dd>` : ""}
           </dl></td></tr>`
         : "";
       return `<tr class="click" ${on(toggle)}>
-        <td class="nowrap">${statusDot(status)}<b>${esc(name)}</b>${m.auth?.length ? `<span class="lock" title="password protected">🔒</span>` : ""} <span class="faint">${open ? "▾" : "▸"}</span></td>
-        <td class="hide-sm"><div class="chips">${m.domains.map((d) => domainChip(n, d)).join("")}</div></td>
-        <td class="hide-sm"><span class="badge">${esc(m.kind)}</span></td>
+        <td><div class="site-name">${statusDot(status)}<b>${esc(name)}</b>${m.auth?.length ? `<span class="lock" title="password protected">🔒</span>` : ""} <span class="faint">${open ? "▾" : "▸"}</span></div>
+          <div class="chips show-sm">${domains.map((d) => domainChip(n, d)).join("")}</div></td>
+        <td class="hide-sm"><div class="chips">${domains.map((d) => domainChip(n, d)).join("")}</div></td>
+        <td class="hide-sm"><span class="badge" title="${esc(services.map((x) => x.service).join(", "))}">${esc(kind)}</span>${services.length > 1 ? ` <span class="faint">${services.length} services</span>` : ""}</td>
         <td class="hide-sm dim">${cur ? esc(ago(cur.at)) : ""}</td>
         <td class="acts">${acts}</td></tr>${detail}`;
     })
     .join("");
   return `<div class="card scroll"><table>
     <thead><tr><th>Site</th><th class="hide-sm">Domains</th><th class="hide-sm">Kind</th><th class="hide-sm">Deployed</th><th></th></tr></thead>
-    <tbody>${rows}</tbody></table></div>`;
+    <tbody>${rows}</tbody></table></div>${othersCard(n, o)}`;
 }
 
-/** Where a site lives on the server, and which of its files are live. */
-function siteFiles(m, cur) {
+/** Where a site lives on the server: docker compose works in its current folder. */
+function siteFiles(m, state) {
   const dir = `${S.state.paths.sites}/${m.name}`;
-  const live =
-    m.kind === "image" ? `image <span class="mono">${esc(cur?.image ?? "?")}</span>`
-    : m.kind === "static" ? `files <span class="mono">${esc(`${dir}/releases/${m.current}`)}</span>`
-    : `built from <span class="mono">${esc(`${dir}/releases/${m.current}`)}</span>${cur?.image ? ` as <span class="mono">${esc(cur.image)}</span>` : ""}`;
-  return `<span class="mono">${esc(dir)}</span><div class="dim">live: ${live}</div>
-    <div class="faint mono">site.json · docker-compose.yml · .env (mode 600)${m.kind === "image" ? "" : " · releases/"}</div>`;
+  if (m.adopted) return `<span class="mono">${esc(m.adopted)}</span><div class="dim">its own folder; project <span class="mono">${esc(m.project ?? m.name)}</span></div>`;
+  if (state === "old") return `<span class="mono">${esc(dir)}</span>`;
+  return `<span class="mono">${esc(dir)}/current</span> <span class="dim">→ releases/${esc(m.current)}</span>
+    <div class="faint mono">compose.yaml · compose.override.yaml (landfall's) · .env (mode 600)</div>
+    <div class="faint">run it by hand: <span class="mono">cd ${esc(dir)}/current && docker compose ps</span></div>`;
+}
+
+function adoptDialog(n, e) {
+  dialog({
+    title: `Adopt ${e.name}?`,
+    text: `${e.name} keeps running from ${e.dir} with its own files and Traefik labels. landfall lists it as a site with logs, restart, stop and start; it does not deploy it or change its domains.`,
+    fields: [{ name: "name", label: "Site name", value: e.name.toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+/, "") }],
+    ok: "Adopt",
+    onOk: (v) => run(["adopt", e.name, ...sv(n), "--name", v.name.trim()], { server: n }),
+  });
 }
 
 function envDialog(n, name) {
@@ -1352,25 +1540,44 @@ function settingsView(n) {
     promptDlg(`Traefik dashboard on ${n}`, "Serves the dashboard behind a password (shown in the output). `off` removes it.\nRuns lf traefik setup, which reconfigures landfall's Traefik.", { label: "Domain", type: "text", value: x.traefik.dashboard ?? (x.domains[0] ? `traefik.${x.domains[0]}` : "") }, (d) => {
       if (d) run(["traefik", "setup", ...sv(n), "--dashboard", d], reload);
     }, "Apply");
+  const sites = S.overview[n]?.data?.sites ?? [];
+  const external = (d) => S.overview[n]?.data?.others?.find((e) => e.domains.includes(d))?.name;
+  const servedBy = (d) => sites.find((s) => s.domains.includes(d))?.meta.name;
+  const serve = (d) => {
+    const cur = servedBy(d);
+    // Only sites whose domains landfall sets; the others name theirs in compose.yaml.
+    const pick = sites.filter((s) => s.main && s.meta.name !== cur);
+    if (!pick.length) return void toast(cur ? `${cur} is the only site on ${n}` : `No sites on ${n} yet: deploy one with @ as its domain`);
+    dialog({
+      title: `Serve a site on ${d}`,
+      text: cur ? `${cur} serves ${d} now; it moves to the site you pick, which keeps its other domains.` : `The site keeps its other domains. ${d} needs an A record pointing at the server.`,
+      fields: [{ name: "site", label: "Site", type: "select", options: pick.map((s) => ({ value: s.meta.name, label: `${s.meta.name} (${s.domains.join(", ")})` })), value: pick[0].meta.name }],
+      ok: "Serve it",
+      onOk: (v) => run(["domains", v.site, ...sv(n), "--add", d, "-y"], { server: n, after: (j) => (j.info.code === 0 ? void (load(n, "settings", true), load(n, "sites", true), render()) : undefined) }),
+    });
+  };
   const P = S.state.paths;
   const ip = x.dns[0]?.ips[0] ?? "<server ip>";
   const records = x.dns.flatMap((r) => [r.apex, r.wildcard]).filter((d) => !d.ok).map((d) => `${esc(d.domain)}  A  ${esc(ip)}`);
   const saved = x.saved ? Object.entries(x.saved).filter(([k, v]) => v !== undefined && k !== "dashboard").map(([k, v]) => [k, `<span class="mono">${esc(String(v))}</span>`]) : [];
   return `
     <div class="card">
-      <h2>Main domains ${btn("Add…", addDomain, "sm")}</h2>
+      <h2>Main domains <span class="actions">${btn("Add domain…", addDomain, "sm")}</span></h2>
       <div class="body">${x.domains.length
-        ? `<table><tbody>${x.domains.map((d, i) => `<tr>
-             <td>${dnsRow(x.dns[i].apex)}${i === 0 ? ` <span class="badge">primary</span>` : ""}<div class="faint">sites: ${dnsRow(x.dns[i].wildcard)}</div></td>
-             <td><div class="actions">${i ? btn("Make primary", () => run(["server", "domain", n, "--primary", d], reload), "ghost sm") : ""}${btn("Remove", () => confirmDlg({ title: `Remove ${d} from ${n}?`, text: "New sites stop getting names under it. Sites keep their domains.", ok: "Remove it", danger: true, onOk: () => run(["server", "domain", n, "--rm", d, "-y"], reload) }), "ghost sm")}</div></td>
-           </tr>`).join("")}</tbody></table>
-           <p class="faint">New sites get <span class="mono">&lt;site&gt;.${esc(x.domains[0])}</span>; a bare name like <span class="mono">blog</span> means <span class="mono">blog.${esc(x.domains[0])}</span>.</p>
+        ? `${x.domains.map((d, i) => `<div class="drow">
+             <div>${dnsRow(x.dns[i].apex)}${i === 0 ? ` <span class="badge accent">primary</span>` : ""}<div class="dim">sites: ${dnsRow(x.dns[i].wildcard)}</div><div class="faint">${servedBy(d) ? `served by <b>${esc(servedBy(d))}</b>` : external(d) ? `served by <b>${esc(external(d))}</b> (not landfall)` : "no site serves it"}</div></div>
+             <div class="actions">${btn(servedBy(d) ? "Serve another site…" : "Serve a site…", () => serve(d), "sm")}${menuBtn([
+               i ? { label: "Make primary", hint: "--primary", run: () => run(["server", "domain", n, "--primary", d], reload) } : null,
+               { label: `Remove ${d}…`, cls: "danger", hint: "--rm", run: () => confirmDlg({ title: `Remove ${d} from ${n}?`, text: "New sites stop getting names under it. Sites keep their domains.", ok: "Remove it", danger: true, onOk: () => run(["server", "domain", n, "--rm", d, "-y"], reload) }) },
+             ], `More for ${d}`)}</div>
+           </div>`).join("")}
+           <p class="faint">New sites get <span class="mono">&lt;site&gt;.${esc(x.domains[0])}</span>; a bare name like <span class="mono">blog</span> means <span class="mono">blog.${esc(x.domains[0])}</span>, and <span class="mono">@</span> means <span class="mono">${esc(x.domains[0])}</span> itself.</p>
            ${records.length ? `<div class="note">Add at your DNS provider:<div class="mono">${records.join("<br>")}</div></div>` : ""}`
         : `<p class="dim">No main domain set in landfall. New sites get a free <span class="mono">&lt;site&gt;.&lt;ip&gt;.sslip.io</span> address until you set one.</p>`}
         ${x.suggest.length ? `<div class="note">${x.domains.length ? "Other domains" : "Domains"} your sites on this server already use: ${x.suggest.map((g) => `<b>${esc(g.domain)}</b> <span class="faint">(${g.hosts})</span> ${btn("Add", () => run(["server", "domain", n, "--add", g.domain], reload), "sm")}`).join(" ")}</div>` : ""}</div>
     </div>
     <div class="card">
-      <h2>Traefik ${btn("Dashboard…", dashboard, "sm")}</h2>
+      <h2>Traefik <span class="actions">${btn("Dashboard…", dashboard, "sm")}</span></h2>
       <div class="body">${rows([
         ["image", esc(x.traefik.summary)],
         ["e-mail", esc(x.traefik.email ?? "none")],
@@ -1442,7 +1649,7 @@ function historyView(n) {
     .join("");
   return `
     <div class="card">
-      <h2>Journal <span class="dim" style="font-weight:400">/opt/srv/journal.log · newest first</span>
+      <h2>Journal <span class="dim" style="font-weight:400">/opt/landfall/journal.log · newest first</span>
         <span class="actions">${total ? btn("Undo everything", () => confirmDlg({ title: `Undo everything landfall did on ${n}?`, text: `${plural(total, "change")}, newest first. Sites, Traefik, the deploy user and landfall's firewall rules go away.`, ok: "Revert everything", danger: true, onOk: () => undo(["--all"]) }), "sm danger") : ""}</span></h2>
       ${items}
     </div>`;
@@ -1463,12 +1670,19 @@ function render() {
 }
 
 document.addEventListener("keydown", (e) => {
+  if (e.key === "Escape" && $("#menu")) return closeMenu();
   if (e.key === "Escape" && !$("#dlg").open && S.job) {
     S.job = null;
     render();
   }
 });
 
+$("#filter").addEventListener("input", (e) => {
+  S.filter = e.target.value.trim();
+  renderNav();
+});
+$("#add-server").onclick = () => addServer();
+
 (async () => {
   try {
     await refreshState();