2 Commits

Include renames

Author	SHA1	Message	Date
kevinveenbirkenbach	9ee4cd0fb9	Merge branch 'main' of github.com:infinito-nexus/core into feature/swarm-nfs ... # Conflicts: # docs/agents/action/iteration/compose.md # roles/svc-db-openldap/vars/main.yml # roles/svc-runner/defaults/main.yml # roles/svc-runner/tasks/02_cleanup_instance.yml # roles/web-app-discourse/meta/server.yml # roles/web-app-mailu/tasks/01_core.yml # roles/web-app-odoo/tasks/main.yml	2026-07-04 18:16:12 +02:00
kevinveenbirkenbachandClaude Opus 4.8	b57ce6c8f6	feat(web-app-jellyfin): add Jellyfin role with LDAP + OIDC SSO plugins ... Implements requirement 030: web-app-jellyfin deploying jellyfin/jellyfin 10.11.11 behind sys-svc-proxy. No external DB (internal SQLite); /config, /cache, /media named volumes; CPU transcoding. Jellyfin has no native SSO, so auth is plugin-based (operator chose BOTH): jellyfin-plugin-ldapauth (central OpenLDAP, all clients incl. native apps) + 9p4/jellyfin-plugin-sso (Keycloak OIDC, web one-click). files/configure-auth.sh completes the first-run /Startup wizard (seeds break-glass admin), installs both plugins via Jellyfin's own /Packages installer, writes the plugin configs, and restarts. Schemas source-verified against the pinned upstream: Jellyfin v10.11.11, LDAP plugin v23 (GUID 958aad66-..., flat XmlSerializer config), SSO plugin v4.0.0.3 (OidConfig fields). Honest caveats: the SSO OidConfigs is a SerializableDictionary (XML shape best-effort), plus plugin ABI compat + the SPA Playwright selectors are live-deploy-validation items (env-blocked). Each config file is XML-well- formedness checked before reload. Validation: make autoformat clean; make test green (lint, test-lint, test-unit, test-integration 190, test-external). Refs: docs/requirements/030-web-app-jellyfin.md Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-29 03:23:10 +02:00