docs(issues): add the past issues which existed before tracking issues

add crowdsec false positive issues

fix the file name of affine android oidc issues

docs/issues/affine/260420_android_oidc.md

@@ -6,7 +6,7 @@
 ## Date
 - 2026-04-20
 
-## version
+## Version
 - affine server: 0.26.3 (self-hosted)
 - affine application: 0.26.3 (Android)
 - IdP: Authelia:4.39.15
@@ -30,4 +30,4 @@
 
 ## Solution
 - Wait for stable release which contains the merge above
-- When the stable version releases, then verify after update
+- When the stable version releases, then verify after update

docs/issues/crowdsec/260321_actual_budget.md

@@ -0,0 +1,33 @@
+# Actual Budget crowdsec false positive issue
+
+## Status
+- Finished
+
+## Date
+- 2026-03-21
+
+## Version
+- Actual Budget: 26.3.0
+
+## Problem
+- When users access and log in actual budget, all connections to homelab services are refused.
+  - fw ban users' IP address.
+
+## Reason
+- Actual budget has local first policy.
+- When the user log in actual budget, the client downloads all sql files from the server.
+- LAPI decides that as an attack which sensitive file(sql) is downloaded concurrently.
+
+## Timeline
+- 2026-03-21: Release actual budget
+- 2026-03-21: Find the false positive case, and add whitelist
+
+## Solution
+- Access to fw
+  - Check the ban list with `sudo cscli alerts list`
+  - Read the ban case with `sudo cscli alerts inspect $NUMBER`
+- Add regex on whitelist
+  - evt.Meta.target_fqdn == '{{ services['actualbudget']['domain']['public'] }}.{{ domain['public'] }}' && evt.Meta.http_path contains '/data/migrations/'
+- Delete false positive decision
+  - Check false positive decision with `sudo cscli decision list`
+  - Delete false positive decision with `sudo cscli decision list --id $ID`

docs/issues/crowdsec/260321_immich.md

@@ -0,0 +1,32 @@
+# Immich crowdsec false positive issue
+
+## Status
+- Finished
+
+## Date
+- 2026-03-21
+
+## Version
+- Immich: 2.6.1
+
+## Problem
+- When users access and log in Immich while Immich is generating thumbnail, all connections to homelab services are refused.
+  - fw ban users' IP address.
+
+## Reason
+- Immich sends 404 error to clients when the client request thumbnail while it is generating them.
+- LAPI decides a ban when a lot of 404 errors occur in short time
+
+## Timeline
+- 2026-03-21: Release Immich
+- 2026-03-21: Find the false positive case, and add whitelist
+
+## Solution
+- Access to fw
+  - Check the ban list with `sudo cscli alerts list`
+  - Read the ban case with `sudo cscli alerts inspect $NUMBER`
+- Add regex on whitelist
+  - evt.Meta.target_fqdn == 'Immich.ilnmors.com' && evt.Meta.http_path contains '/api/assets/' && evt.Meta.http_path contains '/thumbnail'
+- Delete false positive decision
+  - Check false positive decision with `sudo cscli decision list`
+  - Delete false positive decision with `sudo cscli decision list --id $ID`

docs/issues/crowdsec/260404_opencloud.md

@@ -0,0 +1,32 @@
+# OpenCloud crowdsec false positive issue
+
+## Status
+- Finished
+
+## Date
+- 2026-04-04
+
+## Version
+- OpenCloud: 4.0.4
+
+## Problem
+- When users download some files, all connections to homelab services are refused.
+  - fw ban users' IP address.
+
+## Reason
+- OpenCloud uses chunks when clients uploads or download files to it.
+- LAPI decides a ban when a lot of chunks file is uploaded or downloaded from external devices 
+
+## Timeline
+- 2026-04-04: Release Immich
+- 2026-04-04: Find the false positive case, and add whitelist
+
+## Solution
+- Access to fw
+  - Check the ban list with `sudo cscli alerts list`
+  - Read the ban case with `sudo cscli alerts inspect $NUMBER`
+- Add regex on whitelist
+  - evt.Meta.target_fqdn == '{{ services['opencloud']['domain']['public'] }}.{{ domain['public'] }}' && evt.Meta.http_path contains '/js/chunks/'
+- Delete false positive decision
+  - Check false positive decision with `sudo cscli decision list`
+  - Delete false positive decision with `sudo cscli decision list --id $ID`