Notifications and Security

🔔 Notifications, Multi-User Sharing & Security

---

1. Push & Email Notification Channels

Under Settings → Meldingen (Notifications), configure automated alerts for:

• Approaching APK / Technical Inspections (within 30 days or overdue)
• Maintenance Intervals (warning at 90% or overdue at 100%)
• Expiring Glovebox Documents (insurance policies, green cards, warranties expiring within 30 days)

Supported Providers

Provider	Configuration
Pushover	User Key + Application API Token + optional target Device name (priority 1 for overdue alerts, HTML formatting)
Ntfy.sh	Self-hosted or public topic URL + optional Bearer access token
Gotify	Server URL + Application Token
Webhook (Discord / Slack / Generic)	Automatically formats rich embeds for Discord/Slack or dispatches a structured JSON payload
SMTP Email	Host, Port (587/465), TLS, Username, Password, Sender (From), and Recipient (To)

---

2. Multi-User Garage Isolation & Vehicle Sharing

Strict Per-User Isolation

By default, every registered user has a strictly isolated garage: User A cannot see User B's vehicles.

Granular Vehicle Sharing (vehicle_shares)

Want to share a family car with your partner, parents, or co-driver?

1. Go to My Garage (Mijn Garage) and click the Share (Delen) button on any vehicle you own.
2. Select or enter the email address of a registered user and choose their access level:
   • Editor (Bewerker): Can view and log fuel fill-ups, maintenance records, documents, tire measurements, trips, fixed expenses, and view TCO analytics. Only the owner can delete the vehicle itself.
   • Viewer (Kijker): Read-only access to the vehicle's dashboard, fuel history, maintenance history, documents, tires, and TCO analytics.
3. Shared vehicles display a Gedeeld door ... (Shared by) badge in the recipient's garage.

Roles (admin, user, driver)

• admin: Full system access, AI/Notification/Backup settings, and user management.
• user: Full VehicleVault interface for their own vehicles and any vehicles shared with them.
• driver (Chauffeur Modus): Simplified, high-contrast mobile dashboard focused on 1-click fueling, EV charging, and trip logging.

---

3. Reverse Proxy SSO & No-Auth Mode

• Zero-Config Reverse Proxy SSO: Supports Pangolin, Authelia, Authentik, Traefik, and Cloudflare Access via Remote-Email, X-Forwarded-Email, or X-Pangolin-User headers.
• No-Auth Mode (DISABLE_AUTH=true): Can be toggled in Settings → Algemeen or via .env for trusted local home networks.