Fix initial setup caching and container discovery defaults

frontend-modern/src/components/FirstRunSetup.tsx

@@ -131,9 +131,23 @@ export const FirstRunSetup: Component = () => {
 
       // Save credentials for display
       setSavedUsername(username());
-      setSavedPassword(useCustomPassword() ? password() : generatedPassword());
+      setSavedPassword(finalPassword);
       setSavedToken(token);
 
+      // Clear any cached credentials from prior sessions so a reload doesn't auto-submit again
+      try {
+        sessionStorage.removeItem('pulse_auth');
+        sessionStorage.removeItem('pulse_auth_user');
+      } catch (storageError) {
+        console.warn('Unable to clear cached auth session storage', storageError);
+      }
+
+      try {
+        localStorage.removeItem('apiToken');
+      } catch (storageError) {
+        console.warn('Unable to clear cached API token', storageError);
+      }
+
       const bootstrapRecord: APITokenRecord = {
         id: 'bootstrap-token',
         name: 'Bootstrap token',

frontend-modern/src/components/Settings/QuickSecuritySetup.tsx

@@ -117,6 +117,19 @@ export const QuickSecuritySetup: Component<QuickSecuritySetupProps> = (props) =>
       setCredentials(newCredentials);
       setShowCredentials(true);
 
+      try {
+        sessionStorage.removeItem('pulse_auth');
+        sessionStorage.removeItem('pulse_auth_user');
+      } catch (storageError) {
+        console.warn('Unable to clear cached auth session storage', storageError);
+      }
+
+      try {
+        localStorage.removeItem('apiToken');
+      } catch (storageError) {
+        console.warn('Unable to clear cached API token', storageError);
+      }
+
       // Show success message
       showSuccess(
         isRotation

internal/discovery/config_override.go

@@ -84,6 +84,19 @@ func ApplyConfigToProfile(profile *envdetect.EnvironmentProfile, cfg config.Disc
 		}
 	}
 
+	if len(cfg.SubnetAllowlist) == 0 && shouldPruneContainerNetworks(profile.Type) {
+		pruned := make([]envdetect.SubnetPhase, 0, len(profile.Phases))
+		for _, phase := range profile.Phases {
+			if isLikelyContainerPhase(phase.Name) {
+				continue
+			}
+			pruned = append(pruned, phase)
+		}
+		if len(pruned) > 0 {
+			profile.Phases = pruned
+		}
+	}
+
 	// Override scan policy
 	if cfg.MaxHostsPerScan > 0 {
 		profile.Policy.MaxHostsPerScan = cfg.MaxHostsPerScan
@@ -102,6 +115,15 @@ func ApplyConfigToProfile(profile *envdetect.EnvironmentProfile, cfg config.Disc
 	}
 }
 
+func shouldPruneContainerNetworks(env envdetect.Environment) bool {
+	return env == envdetect.DockerBridge || env == envdetect.LXCUnprivileged
+}
+
+func isLikelyContainerPhase(name string) bool {
+	name = strings.ToLower(strings.TrimSpace(name))
+	return strings.Contains(name, "container")
+}
+
 func parseCIDRs(values []string, warnings *[]string) []net.IPNet {
 	var subnets []net.IPNet
 	for _, value := range values {

internal/monitoring/monitor.go

@@ -371,7 +371,6 @@ type InstanceHealth struct {
 	DeadLetter  InstanceDLQ        `json:"deadLetter"`
 }
 
-
 func schedulerKey(instanceType InstanceType, name string) string {
 	return string(instanceType) + "::" + name
 }
@@ -1480,8 +1479,8 @@ func New(cfg *config.Config) (*Monitor, error) {
 	taskQueue := NewTaskQueue()
 	deadLetterQueue := NewTaskQueue()
 	breakers := make(map[string]*circuitBreaker)
-failureCounts := make(map[string]int)
+	failureCounts := make(map[string]int)
-lastOutcome := make(map[string]taskOutcome)
+	lastOutcome := make(map[string]taskOutcome)
 	backoff := backoffConfig{
 		Initial:    5 * time.Second,
 		Multiplier: 2,
@@ -1893,7 +1892,6 @@ func (m *Monitor) buildInstanceInfoCache(cfg *config.Config) {
 	}
 }
 
-
 func (m *Monitor) getExecutor() PollExecutor {
 	m.mu.RLock()
 	exec := m.executor
@@ -1999,12 +1997,12 @@ func (m *Monitor) Start(ctx context.Context, wsHub *websocket.Hub) {
 
 	// Create separate tickers for polling and broadcasting
 	// Hardcoded to 10 seconds since Proxmox updates cluster/resources every 10 seconds
-const pollingInterval = 10 * time.Second
+	const pollingInterval = 10 * time.Second
 
-workerCount := len(m.pveClients) + len(m.pbsClients) + len(m.pmgClients)
+	workerCount := len(m.pveClients) + len(m.pbsClients) + len(m.pmgClients)
-m.startTaskWorkers(ctx, workerCount)
+	m.startTaskWorkers(ctx, workerCount)
 
-pollTicker := time.NewTicker(pollingInterval)
+	pollTicker := time.NewTicker(pollingInterval)
 	defer pollTicker.Stop()
 
 	broadcastTicker := time.NewTicker(pollingInterval)
@@ -3667,6 +3665,12 @@ func (m *Monitor) pollPVEInstance(ctx context.Context, instanceName string, clie
 					Bool("isCluster", modelNode.IsClusterMember).
 					Int("endpointCount", len(instanceCfg.ClusterEndpoints)).
 					Msg("Temperature collection failed - check SSH access")
+			} else if temp != nil {
+				log.Debug().
+					Str("node", node.Node).
+					Str("sshHost", sshHost).
+					Bool("available", temp.Available).
+					Msg("Temperature data unavailable after collection")
 			}
 		}
 
@@ -3698,7 +3702,7 @@ func (m *Monitor) pollPVEInstance(ctx context.Context, instanceName string, clie
 				if nodeErrReason == "" {
 					nodeErrReason = "unknown node error"
 				}
-                nodeErr = fmt.Errorf(nodeErrReason)
+				nodeErr = stderrors.New(nodeErrReason)
 			}
 
 			m.pollMetrics.RecordNodeResult(NodePollResult{
@@ -5233,6 +5237,7 @@ func (m *Monitor) pollPBSInstance(ctx context.Context, instanceName string, clie
 			Msg("PBS backup monitoring disabled")
 	}
 }
+
 // pollPMGInstance polls a single Proxmox Mail Gateway instance
 func (m *Monitor) pollPMGInstance(ctx context.Context, instanceName string, client *pmg.Client) {
 	start := time.Now()