techy/Media-Server-Setup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
29 Commits 1 Branch 0 Tags
15402eeb82d5aede54debf2717a3f44629ef2885
Commit Graph

7 Commits

Author SHA1 Message Date
Brandyn / Techy
15402eeb82 Discord-only login: drop WebDAV/app-password path from docs and generated config comments 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-31 15:00:48 -05:00
Brandyn / Techy
50c037e514 Phase 5+6: main host behind Authentik — copyparty trusts X-Authentik-* headers with group permissions (editors, media-admins), dumpd authorizes from headers (admins/media-admins), /sync gated to media-admins, dock drops its dump password; configure.py loses editors/admin 
WebDAV continues via Authentik app passwords (provider: Intercept header authentication).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-31 14:55:48 -05:00
Brandyn / Techy
f3388f52bc Plan: media-admins group for full copyparty rights in phase 5 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-31 01:24:46 -05:00
Brandyn / Techy
f06ebc1ec1 Plan: phase 11 — MediaMTX auth via Authentik (JWT for the browser, app passwords for OBS, no stream keys) 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-31 00:58:50 -05:00
Brandyn / Techy
384a7ed552 Per-host group gating in Caddy from X-Authentik-Groups; Discord roles -> Authentik groups policy; domain-level forward auth documented 
BOT_REQUIRE_GROUP / LIVE_REQUIRE_GROUP in .env drive a header_regexp matcher after forward_auth
(403 before the app). authentik/discord-roles-to-groups.py syncs Discord roles into groups at
every login so access follows Discord roles without manual edits.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-30 23:22:20 -05:00
Brandyn / Techy
82df0b1583 Live portal: Go Live — browser window capture published over WHIP as <user>/HelmetCam-<date>; dumpd /me/stream-key 
Go Live closes viewer windows, fetches the Authentik-identified user's MediaMTX key from dumpd
(/etc/vanguard/streamers.json written by configure.py), opens Chrome's window-only picker with
audio, prefers H.264 so MediaMTX can record, caps at 12 Mbps / 1440p60, shows live stats, Stop.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-30 23:04:33 -05:00
Brandyn / Techy
c602a6ff52 Vanguard media stack: ingest, copyparty, Syncthing, normalize sweep, Authentik, Jellyfin + Vanguard Metadata plugin, MariaDB, Gitea, bot runtime 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-30 15:43:30 -05:00