446fd32c81
STATUS: MediaMTX restarted (microsecond names live); roles policy to be proven by natural logins
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 17:45:31 -05:00
97d1ba97a9
STATUS/plan: phase 10 Gitea via Authentik verified
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 17:37:28 -05:00
52c065b753
roles policy: only revoke memberships it granted itself (manual adds survive); track in user attributes
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 17:34:43 -05:00
2ab0a4e837
Docs: git-admins claim with Authentik group nesting
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 17:27:51 -05:00
7e935c31d1
Gitea access gated by Authentik group git-users; roles table example
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 17:10:09 -05:00
b661ee795b
Phase 10: Gitea OIDC login prerequisites in compose (external-only registration, auto-register, account linking); README steps
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 17:09:33 -05:00
6db786e00e
Phase 12 verified live; MediaMTX config changes documented as restart-only on this setup
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 16:54:08 -05:00
f1d19ba32d
Plan: off-site gap filling option (home NVENC / Spot GPU) and SYS-3 availability note
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 16:26:44 -05:00
9dc81ae5aa
README/STATUS: gap filling availability and the on/off commands
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 16:25:08 -05:00
4101498ad7
Sweep: fix gap-total parsing so FILL_GAPS_MS actually triggers
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 16:19:58 -05:00
473247e710
Sweep: opt-in gap filling for streams (FILL_GAPS_MS) — CFR re-encode with duplicated frames, raw kept in .src/, timecode carried; default off
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 16:19:25 -05:00
f36487d4b5
Timecode: nominal fps + proper drop-frame detection, shell-safe plan output; streams never VFR-re-encoded; gap list in the sidecar; docs
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 16:17:26 -05:00
3fcb8fbe99
Phase 12: frame-accurate timecode via an overscan band — vgstrip encoder/decoder, sweep writes tmcd + creation_time + sidecar, dumpd /time, Caddy /time routes, MediaMTX microsecond names, /dock/clock/ page, dock band setup via obs-websocket, Go Live band composite + toggle, portal crops the band
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 16:07:56 -05:00
89841c3d2a
Plan: phase 12 — permanent overscan band with a machine-readable server clock; drift-aware decode
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 16:00:03 -05:00
f1bd28f8d1
Plan: phase 12 redesigned as a 10 s machine-readable sync burst decoded by the sweep into the timecode track; nothing visible in finals
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:58:20 -05:00
4419cc9d67
Plan: dock manages the OBS clock overlay through obs-websocket
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:56:33 -05:00
57be5bba52
Plan: burned-in server clock on the Go Live (WebRTC) path via canvas compositing
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:56:00 -05:00
b782621368
Plan: phase 12 uses the server clock as the only time reference
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:53:40 -05:00
b750bdb71c
Plan: phase 12 — timecode track + burned-in clock for frame-accurate multicam
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:53:29 -05:00
a7ad3dc224
STATUS/plan: phases 5-7 and 11 live and verified; refreshed unfinished list
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:48:33 -05:00
5085f8ab55
Docs/apply note: MediaMTX does not hot-reload auth settings; restart between streams after auth changes
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:46:25 -05:00
2988e7a804
Caddy main host: route /me/* to dumpd (the dock's token request was falling through to copyparty -> 403)
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:44:09 -05:00
10cfc6e505
check.sh: syntax checks for shell, python, yaml, dock JS, generators, portal build
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:40:26 -05:00
733f6c54d5
dock: fix JS syntax error (?? mixed with ||) that disabled every button
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:39:58 -05:00
65aa8b0894
Docs: provider invalidation flow so every logout forces a full Discord re-login
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:38:01 -05:00
07a05788ad
dock: sign out ends the Authentik login too, then returns to the dock
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:37:00 -05:00
d44546ef29
dock: sign out in the background and return to the dock instead of landing on copyparty
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:35:31 -05:00
49ea1cd5d0
dock: sign out link (Authentik session) for re-login after group changes
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:33:54 -05:00
dcc347e1ea
Phase 7+11: token-based publishing — MediaMTX authMethod http -> dumpd /mtx-auth (bridge-only port 8081); dumpd mints 12 h HMAC tokens for Discord-authenticated streamers; dock rewritten (no passwords, naming rules with live preview, prefix/suffix, manual-setup accordion with hidden token); portal uses tokens; configure.py drops streamers; MediaMTX hot-reload, Caddy reload — no stream interruption
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:22:15 -05:00
2a74cb7b40
Logout ends the Authentik session: copyparty idp-logout -> outpost sign_out; live portal Sign out link
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:11:53 -05:00
268a6a2f81
copyparty idp-h-key: Caddy injects a header with a secret name (COPYPARTY_IDP_KEY); IdP headers ignored without it
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:09:13 -05:00
b89afb50d2
Caddy: /whoami on the main host echoes the Authentik identity headers for debugging
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:08:16 -05:00
c4a79c3316
README/plan: note WebDAV is available via app passwords but deliberately not set up
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:01:14 -05:00
15402eeb82
Discord-only login: drop WebDAV/app-password path from docs and generated config comments
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 15:00:48 -05:00
50c037e514
Phase 5+6: main host behind Authentik — copyparty trusts X-Authentik-* headers with group permissions (editors, media-admins), dumpd authorizes from headers (admins/media-admins), /sync gated to media-admins, dock drops its dump password; configure.py loses editors/admin
...
WebDAV continues via Authentik app passwords (provider: Intercept header authentication).
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 14:55:48 -05:00
76a7d06df4
Go Live: state the Windows-only quality/audio reality in the form; STATUS note
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 13:37:21 -05:00
e4656b9293
Go Live quality: prefer H.264 High/Main (hardware) then Baseline then VP9; start/min bitrate hints to skip the ramp; motion content hint; show encoder + profile in stats
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 13:33:45 -05:00
e02accb855
Streams published flat as <user>/<Title>__<ts>.mp4 so each recording is its own Jellyfin episode; plugin 0.1.3 parses the title from the name
...
Jellyfin merges several videos in one non-season folder into a single episode with versions,
which collapsed a night of helmet cams into one entry. Recording still lands in <Title>/.live/.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 03:42:53 -05:00
d28c2335d0
Go Live: recording warning before start and a REC badge while live
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 01:48:25 -05:00
f737fc6289
Go Live: state the Windows-only window-audio limitation in the UI and docs
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 01:47:45 -05:00
b634413773
Go Live: request window-scoped audio (windowAudio: window, Chrome 141+); keep the picker window-only
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 01:44:45 -05:00
f3388f52bc
Plan: media-admins group for full copyparty rights in phase 5
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 01:24:46 -05:00
e3fb5db424
STATUS: Go Live verified end to end; remaining items
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 01:22:14 -05:00
2510cfaceb
sweep: portable VFR detection (mawk has no asort; the check silently passed every file on Debian)
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 01:20:32 -05:00
f17e57db63
MediaMTX container TZ=America/New_York so recording filenames match the server clock
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 01:18:54 -05:00
94db824243
configure.py: optional bare-domain Caddy block (redirect to the watch site by default)
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 01:12:22 -05:00
f06ebc1ec1
Plan: phase 11 — MediaMTX auth via Authentik (JWT for the browser, app passwords for OBS, no stream keys)
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 00:58:50 -05:00
4b4c7eaedf
Go Live: MediaMTX credentials via X-Stream-Auth -> Authorization on the Caddy->MediaMTX hop (WebRTC ignores query params); fix WHIP session DELETE path
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 00:56:56 -05:00
dff31b0b37
Docs audit: phase-1 script prints domain-level forward-auth + roles sync; install.sh creates /srv/live; STATUS current
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 00:55:33 -05:00
37b619055b
compose: MediaMTX -ffmpeg image, loopback HLS/WebRTC/API ports, 8189, hook env (earlier edit never applied)
...
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-31 00:53:09 -05:00
