-
Notifications
You must be signed in to change notification settings - Fork 0
Security and Privacy
Björn Schlaack edited this page Jul 26, 2026
·
1 revision
- Plex tokens use the platform credential store.
- Streaming and AI provider secrets must not be logged.
- Credential-bearing URLs must not be persisted in queues, playlists, settings, documentation, or model-visible output.
- Linux compatibility credential stores are process-local only.
Use a strong random API key and expose the server only to trusted networks. Audio stream URLs may carry the API key for direct FFmpeg use; treat them as sensitive.
Arbitrary page fetching uses SSRF protection and refuses private, loopback, link-local, and reserved destinations at connection time. Redirects, response size, content type, and timeout are bounded.
Desktop and server update assets are accepted only after signature and SHA-256 verification. Server helpers accept fixed commands and bounded package paths.
Chat prompts, history, and tool results are transmitted to the configured model provider. Use a local provider when content must remain on the device. Enable only the tools required for the intended workflow.