nia-todo documentation

Administration

Configure the instance, users, email delivery, attachments and optional features from the admin panel.

Open /admin on your instance and sign in with the administrator password created during initial setup. The administrator account is separate from normal app users.

Instance settings

Configure the public base URL first. It is used for password/setup links, email verification, passkeys, push configuration, OIDC callbacks and native integrations.

The network settings also control:

allowed CORS origins
trusted reverse proxies
forwarded client-address handling

See HTTPS and reverse proxy before exposing the instance publicly.

Users

Administrators can create, edit and delete users, manage active sessions and reset a user’s 2FA state. New users set their own password through a one-time setup link.

With working SMTP, the link can be sent automatically.
Without SMTP, copy the generated link and deliver it to the user yourself.
The initial regular user is created during first-run setup.

If the administrator password is lost, use the server-side reset tool:

# Debian/systemd
sudo nia-todo-admin-password-reset
sudo systemctl restart nia-todo

# Docker Compose
docker compose exec nia-todo nia-todo-admin-password-reset

Email and SMTP

SMTP enables invitations, password setup/reset, email verification and email-code fallback where supported.

Configure:

SMTP host and port
security mode: STARTTLS, implicit TLS or none
optional SMTP authentication
From address and display name
optional Reply-To address
one-time password-link lifetime (1–168 hours)

Save the configuration, send a test email and confirm the public base URL before inviting users. Stored SMTP passwords are not displayed again.

Attachments

Administrators can enable uploads globally, select allowed file extensions and set the default quota. A user-specific quota can override the default.

Uploaded files are authenticated and included in packaged backups when the attachment directory remains below the main data directory. Your reverse proxy’s request-size limit must be at least as large as the files you permit.

Optional services

The admin panel also contains:

BrainDump provider and per-user access settings
OIDC and global 2FA policy
update status and installation controls for supported Debian packages

After major configuration changes, sign in once in a private browser window to verify the full login flow before closing your existing admin session.