3 Commits

Author	SHA1	Message	Date
Brandyn / Techy	384a7ed552	Per-host group gating in Caddy from X-Authentik-Groups; Discord roles -> Authentik groups policy; domain-level forward auth documented ... BOT_REQUIRE_GROUP / LIVE_REQUIRE_GROUP in .env drive a header_regexp matcher after forward_auth (403 before the app). authentik/discord-roles-to-groups.py syncs Discord roles into groups at every login so access follows Discord roles without manual edits. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-10-30 23:22:20 -05:00
Brandyn / Techy	82df0b1583	Live portal: Go Live — browser window capture published over WHIP as <user>/HelmetCam-<date>; dumpd /me/stream-key ... Go Live closes viewer windows, fetches the Authentik-identified user's MediaMTX key from dumpd (/etc/vanguard/streamers.json written by configure.py), opens Chrome's window-only picker with audio, prefers H.264 so MediaMTX can record, caps at 12 Mbps / 1440p60, shows live stats, Stop. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-10-30 23:04:33 -05:00
Brandyn / Techy	c602a6ff52	Vanguard media stack: ingest, copyparty, Syncthing, normalize sweep, Authentik, Jellyfin + Vanguard Metadata plugin, MariaDB, Gitea, bot runtime ... Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-10-30 15:43:30 -05:00