Security & recovery
What the admin interface can and can't do, and where it draws the line.
The admin interface does not receive a general-purpose shell. Weather setup is limited to curated, pinned station presets — it cannot install arbitrary extension URLs. It also cannot install FlightAware or Flightradar24 clients, run arbitrary commands, or control unlisted services.
All configuration changes are written through /usr/local/sbin/piskyctl,
which accepts only known configuration targets, validates JSON, limits service names and
operations, and creates timestamped backups under /var/lib/pisky/backups.
Flashing the operating system, cloning PiSky, third-party account creation, unusual driver installation and disaster recovery can still require local terminal or SSH access — the admin interface intentionally doesn't try to replace those.