Self-hosted Opus Clip alternative — reels.biba.live

Go to file

Claude d2c9a48cc2 Google Sign-In auth + email whitelist + session cookies WHY: Doslej basic auth z deljenim AUTH_USER/AUTH_PASS — tvegan za delitev z drugimi (urednika ipd.). Z Google Sign-In dobi vsak uporabnik svoj account, dostop pa nadzira whitelist v env. NEW BACKEND: - GET /login — login stran z Google Sign-In gumbom (GSI popup) - POST /auth/google/callback — verify Google ID token + set session cookie - GET /auth/me — vrne email + auth method (za frontend header) - GET /logout — pobriše cookie + redirect /login - POST /logout AUTH FLOW: 1. Browser GET / → check_auth() → ni session → redirect /login 2. /login → Google Sign-In popup (preko gsi/client.js) 3. User izbere Google account → JS pošlje credential na /auth/google/callback 4. Server verifies token (oauth2.googleapis.com/tokeninfo) 5. Email mora biti v ALLOWED_EMAILS env 6. Set HttpOnly+Secure session cookie (HMAC-SHA256, 30 dni) 7. Redirect / SECURITY: - Session token: base64url(email\|expiry\|HMAC). Server ne ranji ne hrani. - HMAC z SESSION_SECRET (auto-derived iz AUTH_USER+AUTH_PASS če ni nastavljen) - Cookie HttpOnly + Secure + SameSite=lax - Token verify: aud check, iss check, exp check, email_verified check BACKWARD COMPAT: - HTTPBasic auth še vedno deluje (cron, scripte, API klici) - check_auth() probaj prvo cookie, potem basic - Brez GOOGLE_CLIENT_ID env: vse še vedno dela na basic auth ENV VARS (treba dodati v Coolify): - GOOGLE_CLIENT_ID=938379241163-pvb328plec2207rbtufic8u5fgb6mkn9.apps.googleusercontent.com - ALLOWED_EMAILS=sebastjan.artic@gmail.com,ales.cadez@gmail.com - SESSION_SECRET=<random 64-char hex> (optional — defaultni se izračuna) FRONTEND: - Header: 👤 email + ↪ Odjava gumb (samo ko je prijavljen) - DOMContentLoaded fetcha /auth/me, prikaže email		2026-05-04 12:26:53 +00:00
app	Google Sign-In auth + email whitelist + session cookies	2026-05-04 12:26:53 +00:00
scripts	Fix CP1250 encoding bug v sync_qnet.py — È→Č	2026-05-03 14:32:25 +00:00
templates	Google Sign-In auth + email whitelist + session cookies	2026-05-04 12:26:53 +00:00
.env.example	Initial: reels clipper app	2026-04-28 15:28:22 +00:00
.gitignore	Initial: reels clipper app	2026-04-28 15:28:22 +00:00
docker-compose.yml	Initial: reels clipper app	2026-04-28 15:28:22 +00:00
Dockerfile	Qnet song match — fetcha Songs.txt iz 5 MB playerjev (FOLX DE/SLO, ZWEI, ONE, ADRIA), 20K+ songs, fuzzy match na upload-u → clean parsed_artist/parsed_title + auto tv_station. /api/qnet/{stats,match,sync}	2026-05-02 10:42:35 +00:00
README.md	Initial: reels clipper app	2026-04-28 15:28:22 +00:00
requirements.txt	S3 storage module: boto3 abstraction for reels-app workfiles (uploads/outputs/jobs prefixes)	2026-05-03 11:57:12 +00:00

README.md

Reels Clipper · biba.live

Self-hosted Opus Clip alternativa za FOLX TV / PTC. Pretvori 16:9 video v 9:16 reels/shorts/tiktok format z auto face tracking, podnapisi (sl/de/en) in avto-detekcijo refrena v glasbenih pesmih.

Features

📤 Drag & drop upload (do 2 GB)
📺 YouTube URL paste (yt-dlp)
🎯 Smart reframe: track (face follow), center, blur (za glasbo)
🎵 Auto-chorus detection (Whisper + energy hibrid)
📝 Burned-in podnapisi (faster-whisper, multi-jezik)
🎨 3 stili podnapisov: reels, yellow (MrBeast), minimal
🔐 HTTP Basic Auth
📊 Real-time progress (Server-Sent Events)
📦 Docker / Coolify ready

Quick start (lokalno)

docker compose up --build
# odpri http://localhost:8000

Default login: sebastjan / nastavi AUTH_PASS v .env.

Coolify deploy

V Coolify ustvari nov projekt → Docker Compose iz tega repoja
Domena: reels.biba.live

Env vars:

AUTH_USER=sebastjan
AUTH_PASS=<močno geslo>
MAX_UPLOAD_MB=2000

Volume reels_data se ustvari avtomatsko
Deploy → Coolify postavi Traefik reverse proxy + SSL via Let's Encrypt

Pipeline

Upload / YouTube
       ↓
[ yt_download.py ]    ← samo če YouTube
       ↓
[ find_chorus.py ]    ← samo če auto_chorus=true (Whisper + RMS analiza)
       ↓
[ reframe.py ]        ← 16:9 → 9:16 (track / center / blur)
       ↓
[ subtitle.py ]       ← Whisper transkripcija + burn-in
       ↓
   reel.mp4

API

POST /api/upload — multipart file upload, vrne job_id
POST /api/youtube — JSON {url, mode, lang, ...}
POST /api/process — start processing za uploaded job
GET /api/jobs — list vseh
GET /api/jobs/{id} — status
GET /api/stream/{id} — SSE stream progress
GET /api/download/{id} — final reel
DELETE /api/jobs/{id} — pobriši

Dependencies

FFmpeg (system)
faster-whisper (transkripcija)
OpenCV (face detection)
yt-dlp (YouTube)
FastAPI + uvicorn (server)