jellyfin-accounts/README.md

168 lines
6.2 KiB
Markdown
Raw Normal View History

2020-04-11 14:20:25 +00:00
# jellyfin-accounts
2020-04-12 20:25:27 +00:00
***New: Now capable of sending password reset emails!***
A basic account management system for [Jellyfin](https://github.com/jellyfin/jellyfin).
* Provides a web interface for creating invite codes
* Sends out emails when a user requests a password reset
2020-04-11 14:20:25 +00:00
* Uses a basic python jellyfin API client for communication with the server.
* Uses [Flask](https://github.com/pallets/flask), [HTTPAuth](https://github.com/miguelgrinberg/Flask-HTTPAuth), [itsdangerous](https://github.com/pallets/itsdangerous), and [Waitress](https://github.com/Pylons/waitress)
* Frontend uses [Bootstrap](https://getbootstrap.com), [jQuery](https://jquery.com) and [jQuery-serialize-object](https://github.com/macek/jquery-serialize-object)
2020-04-12 20:25:27 +00:00
* Password resets are handled using smtplib, requests, and [jinja](https://github.com/pallets/jinja)
2020-04-11 14:20:25 +00:00
## Screenshots
<p align="center">
<img src="images/admin.png" width="45%"></img> <img src="images/create.png" width="45%"></img>
</p>
## Get it
### Requirements
2020-04-12 20:25:27 +00:00
2020-04-13 14:05:37 +00:00
* This should work anywhere Python does, i've tried to not use anything OS-specific. Drop an issue if there's a problem, of course.
2020-04-12 20:25:27 +00:00
```
* python >= 3.6
* flask
* flask_httpauth
2020-04-12 20:25:27 +00:00
* jinja2
* requests
* itsdangerous
* passlib
* secrets
* configparser
2020-04-13 13:26:40 +00:00
* pyOpenSSL
* waitress
2020-04-12 20:25:27 +00:00
* pytz
2020-04-13 14:16:48 +00:00
* python-dateutil
2020-04-12 20:25:27 +00:00
* watchdog
```
### Install
2020-04-13 14:05:37 +00:00
Usually as simple as:
2020-04-11 14:20:25 +00:00
```
git clone https://github.com/hrfee/jellyfin-accounts.git
cd jellyfin-accounts
2020-04-15 09:58:35 +00:00
pip3 install -r requirements.txt
2020-04-11 14:20:25 +00:00
python3 setup.py install
```
If not, or if you want to use docker, see [install](https://github.com/hrfee/jellyfin-accounts/wiki/Install).
2020-04-11 14:20:25 +00:00
### Usage
* Passing no arguments will run the server
```
usage: jf-accounts [-h] [-c CONFIG] [-d DATA] [--host HOST] [-p PORT] [-g]
jellyfin-accounts
optional arguments:
-h, --help show this help message and exit
-c CONFIG, --config CONFIG
specifies path to configuration file.
-d DATA, --data DATA specifies directory to store data in. defaults to
~/.jf-accounts.
--host HOST address to host web ui on.
-p PORT, --port PORT port to host web ui on.
-g, --get_policy tool to grab a JF users policy (access, perms, etc.)
and output as json to be used as a user template.
```
### Setup
#### Policy template
2020-04-12 20:25:27 +00:00
* You may want to restrict a user from accessing certain libraries (e.g 4K Movies), or display their account on the login screen by default. Jellyfin stores these settings as a user's policy.
2020-04-11 14:20:25 +00:00
* Make a temporary account and change its settings, then run `jf-accounts --get_policy`. Choose your user, and the policy will be stored at the location you set in `user_template`, and used for all subsequent new accounts.
2020-04-12 20:25:27 +00:00
#### Emails/Password Resets
* When someone initiates forget password on Jellyfin, a file named `passwordreset*.json` is created in its configuration directory. This directory is monitored and when created, the program reads the username, expiry time and PIN, puts it into a template and sends it to whatever address is specified in `emails.json`.
* **The default forget password popup references the `passwordreset*.json` file created. This is confusing for users, so a quick fix is to edit the `MessageForgotPasswordFileCreated` string in Jellyfin's language folder.**
* Currently, jellyfin-accounts supports generic SSL/TLS secured SMTP, and the [mailgun](https://mailgun.com) REST API.
* Email html is created using [mjml](https://mjml.io), and [jinja](https://github.com/pallets/jinja) templating is used. If you wish to create your own, ensure you use the same jinja expressions (`{{ pin }}`, etc.) as used in `data/email.mjml`, and also create a plain text version for legacy email clients.
2020-04-11 14:20:25 +00:00
2020-04-12 20:25:27 +00:00
#### Configuration
2020-04-11 14:21:57 +00:00
* Note: Make sure to put this behind a reverse proxy with HTTPS.
2020-04-13 14:05:37 +00:00
For detailed descriptions of each setting, see [setup](https://github.com/hrfee/jellyfin-accounts/wiki/Setup).
2020-04-11 14:20:25 +00:00
On first run, the default configuration is copied to `~/.jf-accounts/config.ini`.
```
[jellyfin]
2020-04-12 20:25:27 +00:00
; It is reccommended to create a limited admin account for this program.
2020-04-11 14:20:25 +00:00
username = username
password = password
; Server will also be used in the invite form, so make sure it's publicly accessible.
server = https://jellyf.in:443
client = jf-accounts
version = 0.1
device = jf-accounts
device_id = jf-accounts-0.1
[ui]
; Set to 0.0.0.0 to run localhost
host = 0.0.0.0
2020-04-11 14:20:25 +00:00
port = 8056
username = your username
password = your password
debug = false
2020-04-12 20:25:27 +00:00
; Displayed at the bottom of all pages except admin
2020-04-11 14:20:25 +00:00
contact_message = Need help? contact me.
; Displayed at top of form page.
help_message = Enter your details to create an account.
; Displayed when an account is created.
success_message = Your account has been created. Click below to continue to Jellyfin.
[password_validation]
; Enables password validation.
enabled = true
; Min. password length
min_length = 8
; Min. number of uppercase characters
upper = 1
; Min. number of numbers
number = 1
; Min. number of special characters
special = 0
2020-04-12 20:25:27 +00:00
[email]
; Enable to store provided email addresses, monitor jellyfin directory for pw-resets, and send pin
enabled = true
; Directory to monitor for passwordReset*.json files. Usually the jellyfin config directory
watch_directory = /path/to/jellyfin
use_24h = true
; Date format follows datetime's strftime.
date_format = %-d/%-m/%-y
; Path to custom email html. If blank, uses the internal template.
email_template =
; Path to alternate plaintext email. If blank, uses the internal template.
email_plaintext =
; Displayed at bottom of emails
message = Need help? contact me.
; Mail methods: mailgun, smtp
method = mailgun
; Subject of emails
subject = Password Reset - Jellyfin
; Address to send from
address = jellyfin@jellyf.in
; The name of the sender
from = Jellyfin
[mailgun]
api_url = https://api.mailgun.net...
api_key = your api key
[smtp]
; Insecure SMTP hasn't been implemented, although I doubt many will need it.
ssl = true
server = smtp.jellyf.in
; Uses SMTP_SSL, so make sure the port is for this, not starttls.
port = 465
password = smtp password
2020-04-11 14:20:25 +00:00
[files]
; When the below paths are left blank, files are stored in ~/.jf-accounts/.
; Path to store valid invites.
invites =
2020-04-12 20:25:27 +00:00
; Path to store email addresses in JSON
2020-04-11 14:20:25 +00:00
emails =
; Path to the user policy template. Can be acquired with get-template.
user_template =
```