fix(vpn): use OPERATOR_USERNAME for headless Plex token/notification

[smartwatermelon]

Summary

• Replaces stat -f%Su /dev/console console-user detection in plex-vpn-bypass.sh with the deploy-time __OPERATOR_USERNAME__ template variable
• On a headless server with no active GUI session, stat returns (NNN) (UID in parens) — neither empty nor "root" — so the old guard passed but the username was garbage, causing token lookup to fail and customConnections to go stale
• Adds sed substitution for __OPERATOR_USERNAME__ in transmission-setup.sh so future deployments work correctly

Files changed

File	Change
app-setup/templates/plex-vpn-bypass.sh	Add OPERATOR_USERNAME config var; remove console_user detection from notify() and get_plex_token()
app-setup/transmission-setup.sh	Add sed substitution for __OPERATOR_USERNAME__ at deploy time
docs/vpn-transmission.md	Document new template placeholder

Live fix on TILSIT

The patched script is already uploaded to /tmp/plex-vpn-bypass-fixed.sh on TILSIT. To activate:

ssh operator@tilsit.local
sudo cp /tmp/plex-vpn-bypass-fixed.sh /usr/local/bin/plex-vpn-bypass.sh
sudo chmod 755 /usr/local/bin/plex-vpn-bypass.sh
sudo launchctl kickstart -k system/com.tilsit.plex-vpn-bypass
tail -f /var/log/tilsit-plex-vpn-bypass.log

The daemon will update customConnections to the current public IP within 60 seconds.

Test Plan

• shellcheck app-setup/templates/plex-vpn-bypass.sh — clean
• shellcheck app-setup/transmission-setup.sh — clean
• Live: apply patch on TILSIT, confirm log shows successful customConnections update to current IP (67.5.106.16)

🤖 Generated with Claude Code