media-access

Overview ¶

Command media-access is the media access worker. Settings are flags or their environment variables; secrets are environment only, each also readable from a file named by {VAR}_FILE:

-listen        MEDIA_ACCESS_LISTEN          default :8080
-s3-endpoint   MEDIA_ACCESS_S3_ENDPOINT     path-style S3 endpoint (RGW or MinIO)
-s3-bucket     MEDIA_ACCESS_S3_BUCKET
-s3-region     MEDIA_ACCESS_S3_REGION       default us-east-1
-hosts         MEDIA_ACCESS_HOSTS           comma list of allowed Host names, e.g. media.example.com;
                                            empty allows any (warned; set it in production)
-cors-origins  MEDIA_ACCESS_CORS_ORIGINS    comma list of exact site origins allowed with credentials,
                                            e.g. https://example.com; empty breaks hls.js (warned)
-resource-policy MEDIA_ACCESS_RESOURCE_POLICY  Cross-Origin-Resource-Policy: same-site (default),
                                            same-origin, or cross-origin (pages on another site)
               MEDIA_ACCESS_S3_ACCESS_KEY_ID, MEDIA_ACCESS_S3_SECRET_ACCESS_KEY   read-only key
               MEDIA_ACCESS_TOKEN_KEY           current signing key "{kid}:{base64 secret}"
               MEDIA_ACCESS_TOKEN_KEY_PREVIOUS  previous key, accepted during rotation; optional