From bb09565388d7b36e1560dd2d9654dccce8e6385b Mon Sep 17 00:00:00 2001 From: Brandyn / Techy Date: Sun, 1 Nov 2026 01:29:33 -0600 Subject: [PATCH] Fix README section cross-reference (5e) Co-Authored-By: Claude Fable 5.1 --- FRESH-INSTALL.md | 2 +- STATUS.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/FRESH-INSTALL.md b/FRESH-INSTALL.md index a2b1c36..71c7d23 100644 --- a/FRESH-INSTALL.md +++ b/FRESH-INSTALL.md @@ -58,7 +58,7 @@ Log in at `https://auth.BASE/` as `akadmin` with `AUTHENTIK_BOOTSTRAP_PASSWORD` 3. Flows & Stages → Stages → `default-source-enrollment-write` → User type **Internal**, user path `users`. 4. Directory → Groups: `streamers`, `editors`, `media-admins`, `admins`, `bot-users`, `git-users`, `git-admins`. Nesting: `admins` parent `authentik Admins`; `authentik Admins` parent `git-admins` (admins inherit everything). - Inherited groups reach the apps only with the extra scope mapping `Vanguard profile (nested groups)` (README 5d), + Inherited groups reach the apps only with the extra scope mapping `Vanguard profile (nested groups)` (README 5e), ticked on the `Vanguard sites`, `Jellyfin` and `Gitea` providers next to the default profile mapping. 5. Customization → Policies → Create Expression Policy ×2 from the repo: `discord-guild-member` (`authentik/discord-guild-policy.py`, set your server ID) and diff --git a/STATUS.md b/STATUS.md index e4b2191..33932fd 100644 --- a/STATUS.md +++ b/STATUS.md @@ -72,7 +72,7 @@ Source of truth: this repo, `techy/Media-Server-Setup` on the stack's own Gitea 0. **Hostname restructure deploy** (committed 2026-11-01): DNS CNAMEs `media`, `files`, `clips`, `sync`; `./configure.py --full` with `media.` as main; MediaMTX restart between streams; `./deployLive.sh`; streamers re-add the dock at `live./dock/` and redo "Add band + clock source"; re-pin Discord links. Procedure C in HOSTNAME-CHANGE.md. -1. Roles→groups policy: bound and updated (revokes only its own grants); will be proven by the next natural Discord logins (`/whoami` should show `bot-users`). Nested groups **verified 2026-11-01**: `git-admins` now reaches the header via the `Vanguard profile (nested groups)` scope mapping (README 5d). `akadmin` remains the recovery login if a policy misfires. +1. Roles→groups policy: bound and updated (revokes only its own grants); will be proven by the next natural Discord logins (`/whoami` should show `bot-users`). Nested groups **verified 2026-11-01**: `git-admins` now reaches the header via the `Vanguard profile (nested groups)` scope mapping (README 5e). `akadmin` remains the recovery login if a policy misfires. 2. Confirm plugin 0.1.3 under Jellyfin → Plugins and the Gitea runner registered. 3. Portal viewer during a real stream: corner chip `webrtc`; Windows Go Live with WarDogs audio (first Windows streamer). 5. Housekeeping: pin `AUTHENTIK_TAG`, rotate the Discord client secret seen in a screenshot, nightly Postgres dump, Caddyfile formatting warning.