Auto-refreshes every 30s. Cross-origin services are checked for reachability only
(browsers cannot read another domain's response body/status without CORS), so a green dot
means "responding". Same-origin JSON health checks read the real payload.
To edit the service list or password, see the SERVICES array and
PW_HASH near the top of this file's script.