techy/Media-Server-Setup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Phase 5+6: main host behind Authentik — copyparty trusts X-Authentik-* headers with group permissions (editors, media-admins), dumpd authorizes from headers (admins/media-admins), /sync gated to media-admins, dock drops its dump password; configure.py loses editors/admin

Browse Source 
WebDAV continues via Authentik app passwords (provider: Intercept header authentication).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
Brandyn / Techy
2026-10-31 14:55:48 -05:00
parent 76a7d06df4
commit 50c037e514
9 changed files with 109 additions and 117 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
systemd/dumpd.service
View File

@@ -5,7 +5,7 @@ After=network.target
[Service]
ExecStart=/usr/bin/python3 /usr/local/bin/dumpd.py
Environment=DUMP_USERS=/etc/vanguard/dump-users.txt
Environment=DUMP_ADMIN_GROUPS=admins,media-admins
Environment=DUMP_TZ=America/New_York
Restart=always
RestartSec=3