docs: correct Jellyfin admin-password claim (archive OCR corruption); prepare Mac WG peer

This commit is contained in:
Frank
2026-09-01 15:53:13 -07:00
parent 6a67a9067f
commit 2d06be876f
3 changed files with 42 additions and 5 deletions
+5 -3
View File
@@ -102,9 +102,11 @@ cgroup regardless of `GroupAdd=keep-groups`.
## Authentication
- **Built-in auth:** per-user libraries, parental controls, max bitrate
limits. The local `dank` admin account is built-in and its password is
Frank's — never recorded in this repo (the bootstrap-era value no longer
authenticates on the live database).
limits. The local `dank` admin account is built-in; its password is
Frank's bootstrap value — never recorded in this repo. (2026-09-01: a
corrupted session-archive reading briefly suggested the password had
changed; verified offline against the stored PBKDF2-SHA512 hash, the
bootstrap value still authenticates.)
- **LDAP via Authentik (live 2026-09-01):** the LDAP-Auth plugin
authenticates users against the authentik LDAP outpost on Dankclaw — see
[[Authentik]] for the outpost unit, provider, and RBAC objects.