summaryrefslogtreecommitdiff
path: root/hostnix/elmo/pinchflat.nix
AgeCommit message (Collapse)Author
2026-08-26ytdl-sub & pinchflat permissionsJoe Mou
2026-08-26Add pinchflatJoe Mou
Coexists with ytdl-sub rather than replacing it, downloading into its own tree under /srv/media/incoming so the two never manage the same files. Podcast clients cannot authenticate, so the feed, cover art, episode art and media stream routes bypass oauth2-proxy with auth_request off. Those are exactly the routes pinchflat serves unauthenticated itself, each addressed by an unguessable UUID. The OPML endpoint is exposed as well but stays token-protected by the app. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>