Split hosts: media (gateway at /), files, clips, sync; live gains /dock, /dock/clock, /dump, /me, /time
configure.py: three new host roles (files/sync/clips) in --full, --hosts, .env, Caddy generator; main host serves about/ at the root (/about* redirects); /time only where it is fetched same-origin. about/index.html links across hosts; addCommunityMediaServer.sh asks for the new names; Caddyfile.example regenerated; README/FRESH-INSTALL/HOSTNAME-CHANGE (procedure C)/STATUS updated. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
@@ -5,13 +5,17 @@ domain. Both are mostly `configure.py --full` plus a known list of places outsid
|
||||
Do it between streams: the main host is MediaMTX's WebRTC advertised host, so a main-host change needs a
|
||||
MediaMTX restart.
|
||||
|
||||
Roles: `main` (gateway page at `/`), `files` (copyparty), `clips`, `sync`, `live` (portal + `/dock/`, `/dock/clock/`,
|
||||
`/dump`, `/me`, `/time`), `auth`, `watch`, `git`, `bot`. Ours: `media.`, `files.`, `clips.`, `sync.`, `live.`, … under
|
||||
`dumpstervigilantes.rip`.
|
||||
|
||||
## Where hostnames live
|
||||
|
||||
### Generated on the server by `configure.py` (regenerated by `--full`, nothing to edit by hand)
|
||||
| Place | Holds |
|
||||
|---|---|
|
||||
| `Caddyfile` | every site block — the source of truth `configure.py` reads back (`# vanguard:<role>` markers) |
|
||||
| `.env` | `MAIN_HOST`, `WATCH_HOST`, `GIT_HOST`, `BOT_HOST`, `LIVE_HOST`, `APEX_HOST`, `APEX_REDIRECT` |
|
||||
| `.env` | `MAIN_HOST`, `FILES_HOST`, `CLIPS_HOST`, `SYNC_HOST`, `WATCH_HOST`, `GIT_HOST`, `BOT_HOST`, `LIVE_HOST`, `APEX_HOST`, `APEX_REDIRECT` |
|
||||
| `mediamtx.yml` | `webrtcAdditionalHosts: [MAIN_HOST]` (needs a MediaMTX restart to take effect) |
|
||||
| `docker-compose.yml` → container env | Jellyfin `PublishedServerUrl` (WATCH), Gitea `DOMAIN/ROOT_URL/SSH_DOMAIN` (GIT), bot `WEB_PUBLIC_URL` (BOT), MediaMTX `LIVE_HOST` (text of the "is live" post), act_runner `GITEA_INSTANCE_URL` (GIT). `compose up -d` in the apply recreates the affected containers (seconds each) |
|
||||
| Caddy TLS | certificates for new names are fetched automatically; old ones linger harmlessly |
|
||||
@@ -19,9 +23,9 @@ MediaMTX restart.
|
||||
### Pages in the repo that derive sibling hosts from the browser's location (label names hard-coded)
|
||||
| File | Assumes |
|
||||
|---|---|
|
||||
| `about/index.html` | `auth.`, `watch.`, `live.`, `git.`, `bot.` + the parent of the current host |
|
||||
| `dock/index.html` | `auth.` (sign-out), ingest host prefilled from the current host |
|
||||
| `switchToClone.sh`, `deployLive.sh` | defaults for `git.dumpstervigilantes.rip` / `ovh1.dumpstervigilantes.rip` (override by env/arg, or edit) |
|
||||
| `about/index.html` | `files.`, `clips.`, `sync.`, `live.`, `auth.`, `watch.`, `git.`, `bot.` + the parent of the current host |
|
||||
| `dock/index.html` | `auth.` (sign-out), ingest host prefilled from the current host (`live.`; any name of the box works for RTMP/SRT) |
|
||||
| `switchToClone.sh`, `deployLive.sh` | defaults for `git.dumpstervigilantes.rip` / `media.dumpstervigilantes.rip` (override by env/arg, or edit) |
|
||||
| `README.md`, `FRESH-INSTALL.md` | examples only |
|
||||
Renaming a *label* (e.g. `watch` → `video`) means editing the first two; changing only the domain does not.
|
||||
|
||||
@@ -41,9 +45,9 @@ Renaming a *label* (e.g. `watch` → `video`) means editing the first two; chang
|
||||
| Gitea runner | registered with the instance URL → `./registerGiteaRunner.sh` again | git |
|
||||
| Server clone | `git remote set-url origin ssh://git@GIT:2222/techy/Media-Server-Setup.git`; `~/.ssh/config.vanguard` Host line | git |
|
||||
| Dev box | `git remote set-url origin …` | git |
|
||||
| Streamers' OBS | dock URL (Custom Browser Docks), dock Settings → ingest host (re-save), clock browser source URL (dock → Timecode band → "Add band + clock source" again), any manual RTMP/SRT configs (copy from the dock) | main |
|
||||
| Streamers' OBS | dock URL (Custom Browser Docks), dock Settings → ingest host (re-save), clock browser source URL (dock → Timecode band → "Add band + clock source" again), any manual RTMP/SRT configs (copy from the dock) | live |
|
||||
| Jellyfin apps on phones/TVs | server address | watch |
|
||||
| Bookmarks, Discord pinned links | `/about/`, `/clips/`, watch, live | all |
|
||||
| Bookmarks, Discord pinned links | main (gateway), clips, files, watch, live | all |
|
||||
Not affected: Syncthing pairings (device IDs), MariaDB, stream tokens, the Gitea webhook (gateway IP), Authentik users/groups/policies.
|
||||
|
||||
## A. Renaming one subdomain (example: `watch.BASE` → `video.BASE`)
|
||||
@@ -77,10 +81,10 @@ Per-host extras when it is a different host:
|
||||
Plan a maintenance window: Caddy, Jellyfin, Gitea, the bot and MediaMTX all restart, and every member logs in again
|
||||
(the Authentik session cookie is bound to the base domain).
|
||||
|
||||
1. DNS on the new domain: `A HOST2 → IP`, CNAMEs `auth`, `watch`, `git`, `bot`, `live` → `HOST2` (optional bare domain A).
|
||||
1. DNS on the new domain: `A HOST2 → IP`, CNAMEs `files`, `clips`, `sync`, `live`, `auth`, `watch`, `git`, `bot` → `HOST2` (optional bare domain A).
|
||||
Verify they resolve before continuing. Leave the old domain's records in place for now.
|
||||
2. Discord developer portal → OAuth2 → add redirect `https://auth.NEW/source/oauth/callback/discord/` (keep the old one until step 9).
|
||||
3. Server, between streams: `./configure.py --full` → new main hostname; the five sub-hostnames default to the new
|
||||
3. Server, between streams: `./configure.py --full` → new main hostname; the eight sub-hostnames default to the new
|
||||
base (Enter); bare domain; `y`. Then `docker compose restart mediamtx` (webrtcAdditionalHosts changed).
|
||||
All sites answer on the new names within a minute (certificates).
|
||||
4. Authentik (log in at the NEW auth host with akadmin — Discord login is broken until step 5 is done):
|
||||
@@ -95,11 +99,30 @@ Plan a maintenance window: Caddy, Jellyfin, Gitea, the bot and MediaMTX all rest
|
||||
`./registerGiteaRunner.sh`; server: `cd ~/vanguard-stream && git remote set-url origin ssh://git@git.NEW:2222/techy/Media-Server-Setup.git`
|
||||
and edit `~/.ssh/config.vanguard` (Host line); dev box: `git remote set-url origin …`. Test `sudo vanguard-deploy pull`.
|
||||
8. Repo defaults: `switchToClone.sh` (REPO_SSH), `deployLive.sh` (HOST) — commit, push, pull.
|
||||
9. Streamers: re-add the dock at `https://HOST2/dock/`, re-save Settings, "Add band + clock source" again.
|
||||
Members: `https://HOST2/about/`; Jellyfin apps → new server address. Remove the old Discord redirect and the old DNS.
|
||||
9. Streamers: re-add the dock at `https://live.NEW/dock/`, re-save Settings, "Add band + clock source" again.
|
||||
Members: `https://HOST2/`; Jellyfin apps → new server address. Remove the old Discord redirect and the old DNS.
|
||||
|
||||
## C. Splitting the single main host into media / files / clips / sync (done 2026-11-01)
|
||||
|
||||
Before: one main host (`ovh1.BASE`) served copyparty at `/`, `/about/`, `/clips/`, `/sync/`, `/dock/`, `/dump`, `/time`.
|
||||
After: `media.BASE` = gateway at `/`; `files.BASE` = copyparty; `clips.BASE`; `sync.BASE`; `live.BASE` gains `/dock/`,
|
||||
`/dock/clock/`, `/dump`, `/me`, `/time`, `/whoami`. `/time` is only on `live` because the two pages that fetch it
|
||||
(the clock source and Go Live) are same-origin there. Authentik needs nothing: the domain-level provider covers every
|
||||
name under BASE, the outpost host (`auth.`) is unchanged.
|
||||
|
||||
1. DNS: CNAMEs `media`, `files`, `clips`, `sync` → the box (keep `ovh1` for ssh; it is no longer a web host).
|
||||
2. Dev box: pull/upload the repo (`configure.py`, `about/`, `addCommunityMediaServer.sh`, docs).
|
||||
3. Server, between streams: `./configure.py --full` → main hostname `media.BASE`; Enter for the sub-hostnames
|
||||
(defaults `files.`, `clips.`, `sync.`, …); bare domain redirect → `https://media.BASE/`; `y`.
|
||||
Then `docker compose restart mediamtx` (webrtcAdditionalHosts is now `media.`) and `./deployLive.sh` (portal
|
||||
build picks up nothing new, but confirms `/srv/live` is served on `live.`).
|
||||
4. Streamers: OBS → Custom Browser Docks → replace the dock URL with `https://live.BASE/dock/`; dock Settings →
|
||||
save; Timecode band → "Add band + clock source" again (the clock browser source URL moved).
|
||||
5. Discord: re-pin `https://media.BASE/` (members), `https://clips.BASE/` (gamers), `https://files.BASE/` (editors).
|
||||
6. Old `ovh1` bookmarks stop working (no Caddy block, TLS fails) — point people at the gateway.
|
||||
|
||||
## Checklist after any change
|
||||
dev$ for h in HOST auth.BASE watch.BASE git.BASE live.BASE bot.BASE; do printf '%-26s ' $h; curl -s -o /dev/null -m 10 -w '%{http_code}\n' https://$h/; done
|
||||
dev$ for h in HOST files.BASE clips.BASE sync.BASE live.BASE auth.BASE watch.BASE git.BASE bot.BASE; do printf '%-26s ' $h; curl -s -o /dev/null -m 10 -w '%{http_code}\n' https://$h/; done
|
||||
https://HOST/whoami → your identity (gate works on the new name)
|
||||
https://watch.BASE/sso/OID/start/authentik → Jellyfin SSO round trip
|
||||
https://git.BASE/user/login → "Sign in with authentik" round trip
|
||||
|
||||
Reference in New Issue
Block a user