Phase 2: Docker and OIDC auth

backend/README.md

@@ -1,6 +1,6 @@
 # Backend - Media Library Viewer API
 
-FastAPI backend serving the REST API for Jellyfin media browsing, SSH file inspection, and server monitoring.
+FastAPI backend serving the REST API for Jellyfin media browsing, SSH file inspection, server monitoring, and JWT-protected access.
 
 ## Project structure
 
@@ -21,10 +21,12 @@ backend/
 │       │   ├── dashboard.py
 │       │   ├── monitoring.py
 │       │   ├── media.py
+│       │   ├── users.py
 │       │   ├── files.py
 │       │   └── jobs.py
 │       ├── clients/
 │       │   ├── jellyfin.py
+│       │   ├── jellyseerr.py
 │       │   ├── resources.py
 │       │   └── ssh.py
 │       ├── domain/
@@ -52,6 +54,20 @@ JELLYFIN_URL=https://jellyfin.example.com
 JELLYFIN_API_KEY=your-api-key
 JELLYFIN_USER_ID=
 
+# Optional Jellyseerr enrichment for the Users tab
+JELLYSEERR_URL=https://requests.example.com
+JELLYSEERR_API_KEY=your-jellyseerr-api-key
+
+# Optional backend logging level
+LOG_LEVEL=INFO
+
+# Authentik / OIDC
+AUTH_ENABLED=true
+OIDC_ISSUER_URL=https://authentik.example/application/o/media-library-viewer/
+OIDC_AUDIENCE=media-library-viewer
+OIDC_JWKS_URL=
+OIDC_CLOCK_SKEW_SECONDS=30
+
 SSH_HOST=media-server.example.com
 SSH_USERNAME=username
 SSH_PORT=22
@@ -77,6 +93,10 @@ PYTHONPATH=src uvicorn media_library_viewer_api.main:app --reload --port 8000
 
 API docs available at: http://localhost:8000/docs
 
+## Docker
+
+The repository root includes a production `docker-compose.yml` and a development `docker-compose.dev.yml`.
+
 ## API Endpoints
 
 - `GET /api/dashboard/counts` — Movie/series/episode totals
@@ -96,3 +116,4 @@ API docs available at: http://localhost:8000/docs
 - `GET /api/files/resolve-path?path=` — Path resolution
 - `GET /api/jobs/templates` — Available jobs
 - `POST /api/jobs/run` — Execute a job
+- `GET /api/users` — Jellyfin users with optional Jellyseerr enrichment