Vanguard media stack: ingest, copyparty, Syncthing, normalize sweep, Authentik, Jellyfin + Vanguard Metadata plugin, MariaDB, Gitea, bot runtime

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

copyparty.conf

@@ -0,0 +1,47 @@
+# copyparty — editors browse/preview/download; finals are writable.
+# Docs: https://github.com/9001/copyparty#server-config
+
+[global]
+  e2dsa                 # index files for search
+  e2ts                  # read media tags
+  th-ff-jpg             # video thumbnails via ffmpeg (cached under /cfg/hist)
+  hist: /cfg/hist
+  rproxy: 1             # trust first X-Forwarded-For hop (Caddy)
+  xff-src: 172.16.0.0/12, 10.0.0.0/8, 192.168.0.0/16
+  no-robots
+  name: vanguard
+  usernames             # login needs username + password (default is password-only)
+  # dark skin for the login page (served by Caddy from ./dock)
+  html-head: <link rel="stylesheet" href="/dock/vanguard.css">
+
+[accounts]
+  admin:   CHANGEME_ADMIN
+  editor1: CHANGEME_E1
+  editor2: CHANGEME_E2
+
+# streams: read for editors, full for admin
+[/streams]
+  /w/streams
+  accs:
+    r:    editor1, editor2
+    rwmd: admin
+
+# gamer clips (Syncthing drops them here)
+[/clips]
+  /w/clips
+  accs:
+    r:    editor1, editor2
+    rwmd: admin
+
+# editors upload finished work here
+[/finals]
+  /w/finals
+  accs:
+    rw:   editor1, editor2
+    rwmd: admin
+
+# dumped nights, purged after 3 days — admin only
+[/trash]
+  /w/trash
+  accs:
+    rwmd: admin