A tour of the admin

Go to /admin and sign in, or choose Admin Panel from the menu under your name at the top of the site. Every screen is opened from the sidebar on the left, which has fourteen groups. The first screen is the Control Panel, and it is where you find out what needs you today.

A group in the sidebar opens when you click it and closes when you open another. The group that holds the screen you are on stays open. At the foot are Back to App, which returns to the public site, and Sign Out. The guides name a screen by its group and its item: "Plans under Monetization".

The Control Panel#

What needs you#

The box at the top gathers every queue in the admin that is waiting for a decision. Its heading is one of four:

Underneath, the waiting items are grouped as Incidents, Approvals and Triage, each with a count. There are seventeen kinds, among them Jobs awaiting moderation, Reported jobs, Company reviews to moderate and Paid orders awaiting review. A kind with nothing waiting is left out. Click a line to open the screen where you deal with it. With nothing waiting, the box reads "You're all caught up".

The six tiles#

Until Stripe is connected the first two tiles read Connect Stripe, and until an AI key is saved the next two read Set up AI.

The launch checklist#

Once the setup wizard has been finished, a Launch checklist sits under the top box, with a count such as "3/8". Each line ticks itself when the thing is done, and clicking a line opens the screen where you do it.

Email, AI and Stripe are marked optional on the list. Re-run setup wizard opens the wizard again.

The rest of the page#

• Five counters: Companies, Applications, Ingestion Sources, Pending Raw Jobs and New Jobs (7d).

• Latest Syncs: the last eight lines of the ingestion log.

• Jobs Ingested: new jobs for each of the last 14 days.

• Automation: the next five scheduled tasks, with the runs and failures of the last 24 hours.

• Source Health: up to ten sources, each with its status and when it last ran.

• Quick Actions: five shortcuts.

System Health#

Open System Health under Overview. A banner reads "All systems go", "Attention needed" or "Action required", above six cards of checks: Infrastructure, Automation, Job pipeline, Search integrity, Content engines and Comms & integrations. Re-run checks runs them again on the spot. The same checks run by themselves every 30 minutes, and their result is the Health badge on the Control Panel. Backups, scheduled tasks and health goes through each check and the thresholds at the foot of the page.

The sidebar, group by group#

Overview, Users & Auth and Security#

Job Board and Blog#

Ingestion and Tools#

Insights, Analytics and AI#

Monetization#

Appearance, SEO and Settings#

Users and roles#

Open All Users under Users & Auth. It counts Total Users, Employers and Seekers, and lists accounts 50 to a page, newest first, with a search by name or email.

Every account has one of four roles:

People choose Job Seeker or Employer themselves when they register. The two admin roles are given by you. There is no "add user" button, so to make a second admin the person registers first.

1. 1

   Step 1: Have them create an account

   They register on your site in the ordinary way.

2. 2

   Step 2: Find them in All Users

   Search for their name or email.

3. 3

   Step 3: Change the role

   Click Actions on their row and, under Change role, choose Make Administrator.

4. 4

   Step 4: Have them sign out and in again

   The new role applies the next time they sign in.

The Actions menu also has View profile, Log out everywhere and Delete user. The rest is on the account's own page, which opens when you click the name:

• Access & Role: the same change of role, with Save Role.

• Send password reset: emails the person a link to set a new password. With no email set up you see "SMTP is not configured — the reset link was written to the server log."

• Mark email verified: shown only for an account that is not verified. Use it when the verification email never arrived. Until an address is verified, an employer cannot post and a job seeker cannot apply.

• Suspend account: type a reason if you want one, then Confirm suspension. The person is signed out everywhere and cannot sign in. Lift suspension undoes it.

• Delete User, under Danger Zone: removes the account and everything attached to it, and cannot be undone.

You cannot change your own role, suspend yourself or delete yourself, so a site always keeps one administrator.

The read-only guest admin#

A guest admin is for showing the admin to someone, such as a person thinking of buying the site, without letting them change it. Their sidebar says Read-only under the site's name, and email addresses are masked, for example j•••@e•••.com.

A guest does not see Security, Monetization or Settings at all, nor Tagging, Scheduled Tasks, Email Manager and Telegram under Tools. Opening one of those screens by its address sends them to the home page, with the one exception in the note below. Whatever a guest presses anywhere else, nothing is saved.

Make one from Actions, Make Guest Admin (read-only), or create the account from the terminal in the Job Lab folder:

DATABASE_URL=postgres://joblab:joblab@localhost:5433/joblab pnpm tsx scripts/make-guest-admin.ts [email protected] a-strong-password

If the email already has an account, that account becomes a guest admin and the password is ignored. Never give it your own email: your administrator account would become a guest. The address in front is the database on your own computer. On a server, use the DATABASE_URL from that server's .env.

Security#

Open Overview under Security.

• Overview has a banner, "No security incidents", "Worth a look" or "Attention required", then counters for the last 24 hours and a list of Security checks. One of them, Guest (read-only) admin access, stays on a warning for as long as any guest admin exists.

• Sessions lists every signed-in device. Actions on a row offers Revoke session and Log out user everywhere. Log out all users signs out everyone on every device except the one you are using.

• Event Log is the record of every sign-in, failed sign-in, lockout and admin action. Filter it by Logins, Account, Admin actions or Incidents, or search by email or IP address.

• Settings holds the numbers:

Telegram me when an admin signs in is off to begin with. The lockout and the rate limits are counted in Redis: while Redis cannot be reached, sign-in still works and neither is applied.

Settings, General#

Open General under Settings. Feature Status at the top is four read-only lines saying whether an AI provider, Google sign-in, email and error tracking are set up. Platform Settings is the form:

Click Save Settings and you see "Settings saved successfully." A box you empty goes back to its starting value when you save. The site's name is not here: it is under SEO, Settings.

Danger Zone at the foot has two buttons. Reindex rebuilds the job search index from the database. Clear Queue deletes every raw job that is still waiting to be processed, and cannot be undone.