jschoubben
8dcdd45660
The manifest named /services/plex/{config,transcode} with owner and mode.
On ace /services/plex is a link to /mnt/plex, plex's 133 GB of state, so
a take would have chmod'ed 0700 the top of the one directory the operator
ruled must never be re-moded or re-owned. The directories are now pathless
(config, data, transcode), placed by the mesh; on an adopted machine they
must be placed where the data is (hq 153) before plex is ever taken.
- The container sees exactly the paths ace's plex sees today: /config,
/data (HAL mounts it; the catalogue did not), /transcode and all eight
libraries, including sport-games, live-shows and formula-1. A library
whose mount disappears is emptied by Plex's automatic trash emptying,
taking its watch state with it.
- Libraries are mounted read-only, as the accesses already said.
- Owner 1000:1000 and mode 0755: plex runs as uid 1000 (the image reads
PLEX_UID, not the PUID HAL passes), pms-docker leaves its dirs 0755, and
ace's /mnt/plex is 1000:1000 0755 - so placing adopted data is a no-op.
- Image pinned to what ace runs, 1.43.4.10903; the old pin was 1.43.3.
- ADVERTISE_IP comes from the route's own public name through an env-file
(${bound:route:name}); it depends on mesh-controller #149, and without
it the declaration is refused, not applied.
- The server is routed (label plex) and declares its four GDM discovery
ports, which LAN players use.
- No token secret: a minted one is not a Plex token and the sidecar
preferred it. The sidecar reads PlexOnlineToken from Preferences.xml
through its read-only config mount, and dials ${port:32400}.
Verified: catalogue tests with MESH_CATALOGUE (parse, mounts); a scratch
resolution with ace's assignment on the #149 controller renders
ADVERTISE_IP=https://plex.zurag.be/, both route names and 32400/tcp +
GDM/udp open to anywhere; on main it is refused naming "name". A
throwaway pms-docker at the pinned digest on empty dirs answered
/identity, wrote customConnections from the env-file and ran as 1000;
client.ts typechecks strict and found the token in a Preferences.xml.
206 lines
4.3 KiB
JSON
206 lines
4.3 KiB
JSON
{
|
|
"module": "plex",
|
|
"version": "1",
|
|
"capabilities": [
|
|
"container-runtime"
|
|
],
|
|
"emits": [
|
|
"playback.started",
|
|
"playback.stopped",
|
|
"item.added"
|
|
],
|
|
"consumes": [
|
|
"*.download.completed"
|
|
],
|
|
"own-secrets": {
|
|
"broker": "/var/lib/mesh/plex/broker"
|
|
},
|
|
"listens": [
|
|
{
|
|
"name": "stream",
|
|
"port": 32400,
|
|
"protocol": "tcp",
|
|
"from": "mesh",
|
|
"why": "the server itself: the apps, streaming and the web player, direct and through its route"
|
|
},
|
|
{
|
|
"name": "gdm-1",
|
|
"port": 32410,
|
|
"protocol": "udp",
|
|
"from": "mesh",
|
|
"why": "G'Day Mate discovery: players on the same network find the server without signing in"
|
|
},
|
|
{
|
|
"name": "gdm-2",
|
|
"port": 32412,
|
|
"protocol": "udp",
|
|
"from": "mesh",
|
|
"why": "G'Day Mate discovery"
|
|
},
|
|
{
|
|
"name": "gdm-3",
|
|
"port": 32413,
|
|
"protocol": "udp",
|
|
"from": "mesh",
|
|
"why": "G'Day Mate discovery"
|
|
},
|
|
{
|
|
"name": "gdm-4",
|
|
"port": 32414,
|
|
"protocol": "udp",
|
|
"from": "mesh",
|
|
"why": "G'Day Mate discovery"
|
|
}
|
|
],
|
|
"accesses": [
|
|
{
|
|
"path": "/services/media/movies",
|
|
"mode": "read"
|
|
},
|
|
{
|
|
"path": "/services/media/series",
|
|
"mode": "read"
|
|
},
|
|
{
|
|
"path": "/services/media/anime",
|
|
"mode": "read"
|
|
},
|
|
{
|
|
"path": "/services/media/music",
|
|
"mode": "read"
|
|
},
|
|
{
|
|
"path": "/services/media/audiobooks",
|
|
"mode": "read"
|
|
},
|
|
{
|
|
"path": "/services/media/sport-games",
|
|
"mode": "read"
|
|
},
|
|
{
|
|
"path": "/services/media/live-shows",
|
|
"mode": "read"
|
|
},
|
|
{
|
|
"path": "/services/media/formula-1",
|
|
"mode": "read"
|
|
}
|
|
],
|
|
"resources": [
|
|
{
|
|
"id": "mesh-state",
|
|
"type": "directory",
|
|
"path": "/var/lib/mesh/plex",
|
|
"mode": "0700"
|
|
},
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"place": "."
|
|
},
|
|
{
|
|
"id": "config",
|
|
"type": "directory",
|
|
"mode": "0755",
|
|
"owner": "1000:1000"
|
|
},
|
|
{
|
|
"id": "data",
|
|
"type": "directory",
|
|
"mode": "0755",
|
|
"owner": "1000:1000"
|
|
},
|
|
{
|
|
"id": "transcode",
|
|
"type": "directory",
|
|
"mode": "0755",
|
|
"owner": "1000:1000"
|
|
},
|
|
{
|
|
"id": "server-env",
|
|
"type": "file",
|
|
"path": "${dir:state}/server.env",
|
|
"mode": "0600",
|
|
"content": "ADVERTISE_IP=https://${bound:route:name}/\n"
|
|
},
|
|
{
|
|
"id": "server",
|
|
"type": "container",
|
|
"name": "plex",
|
|
"image": "plexinc/pms-docker@sha256:e0ab27395614a8e1a4fdf84c6bc60ac664915cfdde70c52d030c7728a1c48e14",
|
|
"network": "host",
|
|
"env": {
|
|
"PLEX_UID": "1000",
|
|
"PLEX_GID": "1000",
|
|
"TZ": "Etc/UTC"
|
|
},
|
|
"env-file": [
|
|
"${dir:state}/server.env"
|
|
],
|
|
"volumes": [
|
|
"${dir:config}:/config",
|
|
"${dir:data}:/data",
|
|
"${dir:transcode}:/transcode",
|
|
"/services/media/movies:/movies:ro",
|
|
"/services/media/series:/series:ro",
|
|
"/services/media/anime:/anime:ro",
|
|
"/services/media/music:/music:ro",
|
|
"/services/media/audiobooks:/audiobooks:ro",
|
|
"/services/media/sport-games:/sport-games:ro",
|
|
"/services/media/live-shows:/live-shows:ro",
|
|
"/services/media/formula-1:/formula-1:ro"
|
|
]
|
|
},
|
|
{
|
|
"id": "runtime",
|
|
"type": "container",
|
|
"name": "mesh-plex",
|
|
"network": "host",
|
|
"volumes": [
|
|
"/var/lib/mesh/plex/broker:/run/secrets/broker:ro",
|
|
"${dir:config}:/var/lib/plex/config:ro"
|
|
],
|
|
"env": {
|
|
"MESH_BROKER_FILE": "/run/secrets/broker",
|
|
"MESH_PLEX_URL": "http://127.0.0.1:${port:32400}",
|
|
"MESH_PLEX_DATA_DIR": "/var/lib/plex"
|
|
},
|
|
"artifact": "runtime"
|
|
}
|
|
],
|
|
"requires": [
|
|
"route"
|
|
],
|
|
"contributes": {
|
|
"route": {
|
|
"label": "plex",
|
|
"endpoint": "stream"
|
|
}
|
|
},
|
|
"binds": {
|
|
"route": "${dir:state}/route.json"
|
|
},
|
|
"build": {
|
|
"on": [
|
|
{
|
|
"arg": "BUILD_BASE",
|
|
"module": "mesh-tools",
|
|
"artifact": "build"
|
|
},
|
|
{
|
|
"arg": "RUNTIME_BASE",
|
|
"module": "mesh-tools",
|
|
"artifact": "runtime"
|
|
}
|
|
],
|
|
"artifacts": [
|
|
{
|
|
"name": "runtime",
|
|
"kind": "image",
|
|
"from": "Dockerfile"
|
|
}
|
|
]
|
|
}
|
|
}
|