SSH hardening configuration
- Access for jellyfin user will be limited to jellyfin1 server only
- Commands that jellyfin user can run will be limited to ffmpeg only
- Commands run by jellyfin user will be logged
- (optional) Logs stored in separate log file
tweaks on documentation
- docs folder
- updated SETUP.MD to be copy paste friendly
- added HARDENING.md
This PR added default top-level configuration values, so a configuration
file is no longer strictly required except to override defaults. Adjust
the wording of the relevant README sections to reflect this.
For both the jellyfin server with optional intro-skipper web-ui integration and jellyfin node to act as an ffmpeg transcode target.
Also added HCloud script in a new section for Cloud integration.
This commit represents a complete refactoring of rffmpeg while
preserving all existing functionality.
Several key changes are:
1. A cleaner function tree throughout the code, hopefully making things
easier to understand.
2. The use of "-t -t" to the "ssh" command to optimize behaviour when
Ctrl+C is used to terminate a test process.
3. The removal of the old PID-based "state" system in favour of a
ground-up SQLite-based system which can better track the current status.
4. The renaming of the binary from "rffmpeg.py" to "rffmpeg".
5. The addition of an alternate invocation and corresponding Click-based
CLI interface to manage the database, accessible by calling the
"rffmpeg" binary name directly instead of an "ffmpeg"/"ffprobe" alias.
6. The moving of host management out of the config file and into the
database/Click CLI interface for better management capabilities.
7. The proper defaulting of the configuration; an entirely empty
configuration can be specified if desired, using only default options.
This new version should be functionally identical to the old version in
all cases while providing the above changes.
This commit also adjust the documentation to reflect the updated setup
and options.
