techy/Media-Server-Setup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
93 Commits 1 Branch 0 Tags
9bdf9f1947f77c92798341574d0d178672232122
Commit Graph

4 Commits

Author SHA1 Message Date
Brandyn / Techy
52c065b753 roles policy: only revoke memberships it granted itself (manual adds survive); track in user attributes 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-31 17:34:43 -05:00
Brandyn / Techy
7e935c31d1 Gitea access gated by Authentik group git-users; roles table example 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-31 17:10:09 -05:00
Brandyn / Techy
b2869c3740 Generated configs out of the repo: *.example.* templates only; configure.py refuses to apply over CHANGEME placeholders 
A deploy copied mediamtx.yml (template) over the server's generated file and the next apply
wiped all streamers. Generated files are now gitignored so scp -r cannot clobber them.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-31 00:32:30 -05:00
Brandyn / Techy
384a7ed552 Per-host group gating in Caddy from X-Authentik-Groups; Discord roles -> Authentik groups policy; domain-level forward auth documented 
BOT_REQUIRE_GROUP / LIVE_REQUIRE_GROUP in .env drive a header_regexp matcher after forward_auth
(403 before the app). authentik/discord-roles-to-groups.py syncs Discord roles into groups at
every login so access follows Discord roles without manual edits.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-30 23:22:20 -05:00