techy/Media-Server-Setup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Discord-only login: drop WebDAV/app-password path from docs and generated config comments

Browse Source 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
Brandyn / Techy
2026-10-31 15:00:48 -05:00
parent 50c037e514
commit 15402eeb82
4 changed files with 11 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
README.md
View File

@@ -228,8 +228,8 @@ Design: **Authentik authenticates once for the whole domain; Caddy authorizes pe
3. Per-host group requirement = `.env`: `BOT_REQUIRE_GROUP=bot-users` (default), `LIVE_REQUIRE_GROUP=`
(empty = any logged-in member), `SYNC_REQUIRE_GROUP=media-admins` (the `/sync` Syncthing UI on the main host).
On the main host copyparty itself authorizes by group (`editors`, `media-admins`); the dump endpoint lets
`admins`/`media-admins` dump anyone's night. Enable **"Intercept header authentication"** on the proxy
provider so WebDAV clients can log in with Authentik app passwords. `./configure.py` apply regenerates the Caddy blocks; a user outside the
`admins`/`media-admins` dump anyone's night. Leave "Intercept header authentication" **off**: login is
Discord only, no app passwords, no WebDAV. `./configure.py` apply regenerates the Caddy blocks; a user outside the
group gets a 403 from Caddy before the app sees the request.
4. Discord roles → groups: Directory → Groups: create `bot-users` (and keep `streamers`, `editors`, `admins`).
Discord source → Scopes: `guilds guilds.members.read`. Customization → Policies → Expression Policy
@@ -248,9 +248,8 @@ Log in with Discord at https://media.example.com/ (copyparty behind Caddy + Auth
group: **editors** read streams and clips and write `/finals`; **media-admins** have full rights everywhere
including `/trash`. Scrub any `.mp4` in the browser, download what you want.
WebDAV mount: same URL. Username = your Authentik username, password = an **Authentik app password**
(auth.HOST → your user settings → Tokens and App passwords → create). The proxy provider must have
"Intercept header authentication" enabled for this to work.
No WebDAV: login is Discord only (no passwords of any kind), and a mounted drive cannot do a browser login.
Download from the browser: single files, or select files/folders and use copyparty's zip/tar download.
Every `.mp4` an editor sees is the same kind of file (see "Editing standard"). Raw clipper output that
needed converting is kept in a hidden `.src/` folder next to it (media-admins can show dotfiles in copyparty).