OwnComms Admin

Node live vitals — auto-refresh every 3s

Signaling health the SSE relay that carries WebRTC offers/answers/ICE

SSE stream (direct to node)—

Unbuffered header (X-Accel-Buffering:no)—

What this provesIf frames arrive fast, signaling flows and peers can negotiate video. A stall here is the classic "own-camera-only" bug (a reverse proxy buffering the stream).

Identity & branding name, logo, tagline, theme colors, links, port

Server name

Listen port (applies on restart)

Tagline Logo URL (shown on the join screen; blank = built-in icon) Header links — Label = https://url, one per line Theme overrides — key = value (keys: bg, text, textDim, surface, border, accent, accentText, danger, speaking)

Leave a field blank to keep the built-in OLED-black/yellow default. Changes apply to every client on their next load.

Access & security door code + admin secret + brute-force gate

Entry PIN (door code; blank = open)

New admin key (blank = unchanged)

Wrong-PIN tries before block

Accounts & registration persistent users, roles, signup control, server password

Server password (stronger gate than the PIN; blank = off)

Signups Registration open (new users can self-register) Persistent accounts enabled

Admin panel accessible from the front app URL — when on, an owner/admin who signs in on the normal app sees an inline ⚙ Admin button that opens this panel. No separate port or URL. Turn off to require reaching /admin.html directly. Users — set roles, reset passwords, delete. Owner/admin accounts can open this panel by signing in (no separate port). First registrant becomes owner.

—

New username

Password

Role

Media services TURN/coturn relays + LiveKit — how NAT-blocked peers connect

OwnComms is P2P mesh by default (no server sees your media). Peers behind strict/symmetric NATs can't always reach each other directly — a TURN relay bridges them by forwarding the already-encrypted packets, so end-to-end encryption is preserved (the relay never decrypts). Add TURN entries below. LiveKit is an optional external SFU (breaks E2E; use only if you accept a trusted media server).

ICE / STUN / TURN servers (JSON array — {"urls":["turn:host:3478"],"username":"u","credential":"c"})

How to stand up a coturn relay (copy-paste)

sudo apt install coturn
# /etc/turnserver.conf
listening-port=3478
fingerprint
lt-cred-mech
user=owncomms:CHANGE_ME
realm=vc.shoshal.com
# then add to the box below:
{"urls":["turn:YOUR_HOST:3478"],"username":"owncomms","credential":"CHANGE_ME"}

Enable LiveKit (external SFU — not E2E)

LiveKit URL

API key

API secret (blank = keep)

Speech-to-text voice→chat; lets a muted user still be read

STT enabled (feature available to users) On by default for each user

Provider

Browser mode is the lightest and free — each device transcribes its own mic locally and posts finals to chat, so muting someone still leaves their words readable. Firefox lacks the Web Speech API; point it at a custom endpoint to cover those users.

Avatars preset avatars you offer users (they can also use emoji/image/camera)

Preset avatars — one per line: an emoji, or image=https://…/pic.png

URLs & redirects where the app is served + short-link aliases

Public URLs the app is served at (one per line — informational) Redirect aliases — key = target URL, one per line. Served at /link/<key> and /go/<key>.

Rooms & capacity limits, TTL, chat history, mDNS discovery

Max peers / room

Room TTL (seconds, 0 = keep)

Chat history size (0 = off)

mDNS name (LAN discovery)

Channels always-on named channels shown in the picker

Channels (one per line)

Integrations external nodes pushing channels + now-playing via the sync API

Channel-sync token (shared secret a node presents in X-Node-Token; blank = off)

—

Federation peer nodes whose room directories merge into ours

Federation peer URLs (one per line)

Stream widgets live voice-activity + chat overlays for a room, forwardable to a node/viewer

Pick a room or channel and generate a signed, tokened URL for each overlay. The token carries the room, so the URL alone works off-tailnet and cannot be pointed at other rooms. Hand these to the node (or drop into OBS/StreamParty as a browser source).

Room / channel

Rooms & peers

Devices

—

Downloads self-serve build artifacts

—

OwnComms Admin

OwnComms Admin

Node live vitals — auto-refresh every 3s

Signaling health the SSE relay that carries WebRTC offers/answers/ICE

Identity & branding name, logo, tagline, theme colors, links, port

Access & security door code + admin secret + brute-force gate

Accounts & registration persistent users, roles, signup control, server password

Media services TURN/coturn relays + LiveKit — how NAT-blocked peers connect

Speech-to-text voice→chat; lets a muted user still be read

Avatars preset avatars you offer users (they can also use emoji/image/camera)

URLs & redirects where the app is served + short-link aliases

Rooms & capacity limits, TTL, chat history, mDNS discovery

Channels always-on named channels shown in the picker

Integrations external nodes pushing channels + now-playing via the sync API

Federation peer nodes whose room directories merge into ours

Stream widgets live voice-activity + chat overlays for a room, forwardable to a node/viewer

Rooms & peers

Devices

Downloads self-serve build artifacts

API & integration reference every endpoint this node exposes — copy-paste ready