mono.git/hostnix/elmo/pinchflat.nix, branch testUnnamed repository; edit this file 'description' to name the repository.http://git.mou.fo/2026/mono.git/atom/hostnix/elmo/pinchflat.nix?h=test2026-08-26T17:38:22Zytdl-sub & pinchflat permissions2026-08-26T17:38:22ZJoe Moudev@mou.fo2026-08-13T07:32:53Zurn:sha1:608fe9ccc6e7ea4ab1a458287261021dac1b742cAdd pinchflat2026-08-26T17:38:22ZJoe Moudev@mou.fo2026-08-13T06:45:16Zurn:sha1:d167bc15da3bc3da355d69eadb9420abb3a637e1
Coexists with ytdl-sub rather than replacing it, downloading into its own
tree under /srv/media/incoming so the two never manage the same files.
Podcast clients cannot authenticate, so the feed, cover art, episode art
and media stream routes bypass oauth2-proxy with auth_request off. Those
are exactly the routes pinchflat serves unauthenticated itself, each
addressed by an unguessable UUID. The OPML endpoint is exposed as well but
stays token-protected by the app.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>