anchorless 1.0.0__tar.gz

anchorless-1.0.0/.dockerignore

@@ -0,0 +1,8 @@
+.venv
+.git
+data
+out
+tests
+**/__pycache__
+config.toml
+.env

anchorless-1.0.0/.gitignore

@@ -0,0 +1,13 @@
+__pycache__/
+*.pyc
+.venv/
+.pytest_cache/
+.ruff_cache/
+dist/
+/data/
+/out/
+# Your live config holds your location and local sources: never commit it.
+/config.toml
+.env
+*.mp4
+*.ts

anchorless-1.0.0/CHANGELOG.md

@@ -0,0 +1,5 @@
+# Changelog
+
+## 1.0.0 — 2026-11-02
+
+First release: a 24/7 text newscast for Jellyfin, Plex, Channels DVR or any IPTV player. Headlines come in from public RSS feeds (25 built in, from 11 outlets, plus any you add), the same story is grouped across outlets, and a rundown of top stories, local, national, world and business news plays as an MPEG-TS stream with an M3U playlist and XMLTV guide. Breaking news interrupts the rundown when many outlets pick a story up at once (local stories too, with a higher bar). Two looks: the pixel-art **Studio**, an empty news set with a day-night sky, and **Classic** cable-news pages (light, dark, or switching with the time of day). A browser viewer (with HLS for iPhones) and status page, and a password-protected settings page that edits the config file in place. Built to be self-hosted safely: feed fetches can't reach private networks, viewer limits, security headers, a hashed settings password, https-only settings logins and a change history. Frames are drawn in Python and encoded by ffmpeg, with VA-API hardware encoding, and nothing runs while nobody is watching. Install with `pip install anchorless` and `anchorless init`, or as a container image for amd64 and arm64.

anchorless-1.0.0/CLAUDE.md

@@ -0,0 +1,46 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project
+
+Anchorless: a 24/7 text newscast for IPTV. Public RSS headlines in, an MPEG-TS stream (plus M3U playlist and XMLTV guide) out, for Jellyfin, Plex, Channels DVR or any IPTV player. No browser: Pillow draws every frame, ffmpeg encodes. Python 3.12+, packaged with hatchling, run with uv. Shipped on PyPI (`pip install anchorless`, then `anchorless init`, needs ffmpeg) and as a container image.
+
+## Commands
+
+```bash
+uv sync                              # create/refresh .venv from uv.lock
+uv run anchorless init               # writes config.toml (gitignored) from config.example.toml
+uv run anchorless serve              # the station on :9798 (viewer at /, settings at /settings)
+uv run anchorless check-config       # validate the config (never prints secrets)
+uv run anchorless headlines          # every multi-outlet story's versions, scored
+uv run pytest                        # tests
+uv run ruff check .                  # lint (CI runs both)
+```
+
+Visual changes (anything in `render/`) can't be judged from tests: render frames and look at them.
+
+## Architecture
+
+- `sources/rss.py` fetches feeds (httpx, through the SSRF guard in `netguard.py`) -> `Story`s (`models.py`).
+- `pipeline.py` groups the same story across outlets into `Cluster`s (headline word overlap, then TF-IDF) and builds the rundown; `cluster.stories[0]` is the lead, i.e. the headline shown.
+- `headline.py` is the "consensus headline": which outlet's wording to show. It must stay **outlet-blind** (no outlet is named or rated anywhere) and conservative: it only replaces a headline with a red flag. `[rundown] headline_choice = "log"` runs it in shadow mode.
+- `breaking.py` decides breaking news; `newsroom.py` refreshes on a timer and holds the current state.
+- `render/`: `studio.py` (the pixel-art set, an isometric 2:1 projection: centre things in 3D, a box top's visual centre is half its depth back from the front face), `pages.py` (Classic), `crawl.py`, `theme.py`.
+- `stream/`: `server.py` (`Station` and `Channel`s: ffmpeg starts on the first viewer and stops after the last; viewer limits), `encoder.py`, `playout.py`, `tsbuffer.py` (HLS cut from memory), `web.py` (viewer, status, settings API, security headers/CSP), `admin.py` (settings login).
+- `config.py`: pydantic models; env overrides `ANCHORLESS__SECTION__KEY`. `settings.py`: the settings page edits the TOML file in place with tomlkit. **The file is the source of truth**: per-field conflict checks, validate before writing, atomic replace, a change history.
+
+## Rules
+
+- **No personal or local details in the repo.** Locations and local outlet names live only in a user's `.env` / local feeds file. Test fixtures, examples, screenshots and the README GIF use made-up outlets and headlines.
+- Security behaviour is documented in SECURITY.md and the guide's "Hosting publicly" checklist: keep them true when changing `netguard.py`, `admin.py`, `web.py` or the `[stream]` limits.
+- No inline script or style in the web pages (the CSP forbids it).
+
+## Releasing
+
+1. Bump `version` in `pyproject.toml` (the only place it lives; `anchorless.__version__` reads it), run `uv lock`.
+2. Add `## X.Y.Z — YYYY-MM-DD` at the top of `CHANGELOG.md`: one paragraph, what changed for users.
+3. Commit and push to main, then `scripts/release.sh`: it checks everything and pushes the tag `vX.Y.Z`.
+4. `.github/workflows/release.yml` tests again, then publishes to PyPI (trusted publishing, the `pypi` environment), pushes `ghcr.io/gabebecker2048/anchorless` (`X.Y.Z`, `X.Y`, `X`, `latest`; amd64 + arm64), and creates the GitHub release from the CHANGELOG entry with the wheel and sdist attached.
+
+`config.example.toml` and `local.example.toml` are what `anchorless init` writes: the wheel carries them (pyproject force-include), and `examples.py` falls back to the repo root in a checkout. The README embeds `deploy/docker-compose.example.yml` verbatim (a test checks it).

anchorless-1.0.0/Dockerfile

@@ -0,0 +1,29 @@
+# Anchorless: a 24/7 text newscast for IPTV.
+FROM python:3.12-slim
+
+# ffmpeg, plus VA-API drivers for hardware encoding (Intel: iHD, AMD: Mesa).
+# The Intel driver lives in Debian's non-free component, and only exists for amd64.
+RUN sed -i 's/^Components: main$/Components: main non-free non-free-firmware/' /etc/apt/sources.list.d/debian.sources \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends ffmpeg mesa-va-drivers vainfo \
+       $([ "$(dpkg --print-architecture)" = amd64 ] && echo intel-media-va-driver-non-free) \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=ghcr.io/astral-sh/uv:0.12.4 /uv /usr/local/bin/uv
+
+WORKDIR /app
+ENV UV_COMPILE_BYTECODE=1 UV_LINK_MODE=copy UV_PYTHON_DOWNLOADS=never
+COPY pyproject.toml uv.lock README.md LICENSE config.example.toml local.example.toml ./
+RUN uv sync --frozen --no-dev --no-install-project
+COPY src ./src
+RUN uv sync --frozen --no-dev
+
+RUN useradd --system --uid 10001 --home /data anchorless \
+    && mkdir -p /data /config && chown anchorless /data /config
+USER anchorless
+ENV PATH="/app/.venv/bin:$PATH" ANCHORLESS_CONFIG=/config/config.toml ANCHORLESS__DATA__DIR=/data PYTHONUNBUFFERED=1
+VOLUME /data /config
+EXPOSE 9798
+HEALTHCHECK --interval=60s --timeout=5s --start-period=30s \
+    CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:9798/health', timeout=4)"
+CMD ["anchorless", "serve", "--init"]

anchorless-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Gabe Becker
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

anchorless-1.0.0/PKG-INFO

@@ -0,0 +1,136 @@
+Metadata-Version: 2.5
+Name: anchorless
+Version: 1.0.0
+Summary: A 24/7 text newscast for IPTV: headlines in, MPEG-TS out. News without the anchor.
+Project-URL: Homepage, https://github.com/GabeBecker2048/anchorless
+Project-URL: Changelog, https://github.com/GabeBecker2048/anchorless/blob/main/CHANGELOG.md
+Project-URL: Issues, https://github.com/GabeBecker2048/anchorless/issues
+Author: Gabe Becker
+License-Expression: MIT
+License-File: LICENSE
+Keywords: iptv,jellyfin,news,pixel-art,plex,rss,self-hosted,tv
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Web Environment
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Multimedia :: Video
+Requires-Python: >=3.12
+Requires-Dist: aiohttp>=3.10
+Requires-Dist: feedparser>=6.0
+Requires-Dist: httpx>=0.27
+Requires-Dist: pillow>=11.0
+Requires-Dist: pydantic>=2.8
+Requires-Dist: tomlkit>=0.15.2
+Description-Content-Type: text/markdown
+
+# Anchorless
+
+[![PyPI](https://img.shields.io/pypi/v/anchorless)](https://pypi.org/project/anchorless/)
+[![Python versions](https://img.shields.io/pypi/pyversions/anchorless)](https://pypi.org/project/anchorless/)
+[![Docker image](https://img.shields.io/badge/docker-ghcr.io-blue?logo=docker&logoColor=white)](https://github.com/GabeBecker2048/anchorless/pkgs/container/anchorless)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue)](https://github.com/GabeBecker2048/anchorless/blob/main/LICENSE)
+[![CI](https://github.com/GabeBecker2048/anchorless/actions/workflows/test.yml/badge.svg)](https://github.com/GabeBecker2048/anchorless/actions/workflows/test.yml)
+
+![The Studio look: an empty pixel-art news set. Headlines play on the big screen behind the desk, then a breaking-news alert turns the studio red](https://raw.githubusercontent.com/GabeBecker2048/anchorless/main/docs/studio.gif)
+
+<sub>Recorded from the real playout, sped up. The headlines and outlets are made up.</sub>
+
+**News without the anchor.** Anchorless turns news headlines into a 24/7 TV
+channel you can add to Jellyfin, Plex, Channels DVR or any IPTV player: an empty
+pixel-art news set where the news plays on the big screen behind a desk nobody
+sits at - with a headline crawl, background music and breaking-news alerts.
+
+- Pulls headlines from public RSS feeds, groups the same story across outlets,
+  and builds a rundown (top stories, local, national, world, business).
+- Breaking news interrupts the rundown when many outlets pick a story up at once.
+- Two looks: the pixel-art **Studio**, or **Classic** cable-news pages (light, dark,
+  or switching with the time of day).
+- Lightweight: no browser - Python draws the frames, ffmpeg encodes them, and
+  nothing runs while nobody is watching.
+- Watch it in a browser too, and change its settings there (optional, password
+  protected).
+
+## Install
+
+Anchorless runs as a Docker container, or natively with Python 3.12+ and
+[ffmpeg](https://ffmpeg.org/download.html).
+
+### Docker
+
+Save this as `docker-compose.yml` in a new folder:
+
+```yaml
+services:
+  anchorless:
+    image: ghcr.io/gabebecker2048/anchorless:latest   # or :1 to stay on 1.x
+    restart: unless-stopped
+    user: "1000:1000"            # who owns ./config and ./data (`id -u`:`id -g`)
+    ports:
+      - "9798:9798"
+    volumes:
+      - ./config:/config         # config.toml: written on first start, edit it any time
+      - ./data:/data
+      # - /path/to/music:/music:ro    # a folder of MP3s to play underneath
+    # environment:
+    #   ANCHORLESS__LOCATION__CITY: Springfield    # local news (see config.toml)
+    #   ANCHORLESS__ADMIN__PASSWORD: <long random> # turns on the settings page
+    # Hardware encoding (Intel/AMD): uncomment, set the host's render group id
+    # (getent group render), and set encoder = "vaapi" in config.toml.
+    # devices: ["/dev/dri:/dev/dri"]
+    # group_add: ["992"]
+    # Hardening: Anchorless only writes to /config, /data and /tmp.
+    read_only: true
+    tmpfs: [/tmp]
+    cap_drop: [ALL]
+    security_opt: ["no-new-privileges:true"]
+    mem_limit: 512m
+```
+
+Then, in that folder:
+
+```sh
+mkdir config data      # so they're yours, not root's
+docker compose up -d
+```
+
+The first start writes `config/config.toml`, with every setting explained.
+Update with `docker compose pull && docker compose up -d`.
+
+### Native
+
+```sh
+pip install anchorless   # or: uv tool install anchorless
+anchorless init          # writes config.toml here
+anchorless serve
+```
+
+ffmpeg must be on the PATH (`apt install ffmpeg`, `brew install ffmpeg`, ...).
+Run `anchorless serve` from the folder with `config.toml`, or point at it with
+`anchorless -c /path/to/config.toml serve`.
+
+### Watch
+
+Open `http://<host>:9798/` to watch in a browser, or add it to Jellyfin, Plex or
+any IPTV player as an M3U tuner (`http://<host>:9798/playlist.m3u`) with an
+XMLTV guide (`http://<host>:9798/guide.xml`).
+
+## More
+
+- [The guide](https://github.com/GabeBecker2048/anchorless/blob/main/docs/guide.md): Jellyfin setup, themes and channels, the settings
+  page, hosting publicly, and configuration
+- [`config.example.toml`](https://github.com/GabeBecker2048/anchorless/blob/main/config.example.toml): every setting, explained (what `anchorless init` writes)
+- [SECURITY.md](https://github.com/GabeBecker2048/anchorless/blob/main/SECURITY.md): reporting a vulnerability
+- [CHANGELOG.md](https://github.com/GabeBecker2048/anchorless/blob/main/CHANGELOG.md): what changed in each release
+
+Anchorless doesn't include music: point it at a folder of MP3s you have the
+right to play (`[audio] music_dir`), or it runs with just its own sound effects.
+
+## License
+
+MIT. The bundled fonts are under the SIL Open Font License and the bundled
+[mpegts.js](https://github.com/xqq/mpegts.js) player under Apache 2.0. Headlines
+belong to their outlets; see [Sources and fair use](https://github.com/GabeBecker2048/anchorless/blob/main/docs/guide.md#sources-and-fair-use).

anchorless-1.0.0/README.md

@@ -0,0 +1,107 @@
+# Anchorless
+
+[![PyPI](https://img.shields.io/pypi/v/anchorless)](https://pypi.org/project/anchorless/)
+[![Python versions](https://img.shields.io/pypi/pyversions/anchorless)](https://pypi.org/project/anchorless/)
+[![Docker image](https://img.shields.io/badge/docker-ghcr.io-blue?logo=docker&logoColor=white)](https://github.com/GabeBecker2048/anchorless/pkgs/container/anchorless)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue)](https://github.com/GabeBecker2048/anchorless/blob/main/LICENSE)
+[![CI](https://github.com/GabeBecker2048/anchorless/actions/workflows/test.yml/badge.svg)](https://github.com/GabeBecker2048/anchorless/actions/workflows/test.yml)
+
+![The Studio look: an empty pixel-art news set. Headlines play on the big screen behind the desk, then a breaking-news alert turns the studio red](https://raw.githubusercontent.com/GabeBecker2048/anchorless/main/docs/studio.gif)
+
+<sub>Recorded from the real playout, sped up. The headlines and outlets are made up.</sub>
+
+**News without the anchor.** Anchorless turns news headlines into a 24/7 TV
+channel you can add to Jellyfin, Plex, Channels DVR or any IPTV player: an empty
+pixel-art news set where the news plays on the big screen behind a desk nobody
+sits at - with a headline crawl, background music and breaking-news alerts.
+
+- Pulls headlines from public RSS feeds, groups the same story across outlets,
+  and builds a rundown (top stories, local, national, world, business).
+- Breaking news interrupts the rundown when many outlets pick a story up at once.
+- Two looks: the pixel-art **Studio**, or **Classic** cable-news pages (light, dark,
+  or switching with the time of day).
+- Lightweight: no browser - Python draws the frames, ffmpeg encodes them, and
+  nothing runs while nobody is watching.
+- Watch it in a browser too, and change its settings there (optional, password
+  protected).
+
+## Install
+
+Anchorless runs as a Docker container, or natively with Python 3.12+ and
+[ffmpeg](https://ffmpeg.org/download.html).
+
+### Docker
+
+Save this as `docker-compose.yml` in a new folder:
+
+```yaml
+services:
+  anchorless:
+    image: ghcr.io/gabebecker2048/anchorless:latest   # or :1 to stay on 1.x
+    restart: unless-stopped
+    user: "1000:1000"            # who owns ./config and ./data (`id -u`:`id -g`)
+    ports:
+      - "9798:9798"
+    volumes:
+      - ./config:/config         # config.toml: written on first start, edit it any time
+      - ./data:/data
+      # - /path/to/music:/music:ro    # a folder of MP3s to play underneath
+    # environment:
+    #   ANCHORLESS__LOCATION__CITY: Springfield    # local news (see config.toml)
+    #   ANCHORLESS__ADMIN__PASSWORD: <long random> # turns on the settings page
+    # Hardware encoding (Intel/AMD): uncomment, set the host's render group id
+    # (getent group render), and set encoder = "vaapi" in config.toml.
+    # devices: ["/dev/dri:/dev/dri"]
+    # group_add: ["992"]
+    # Hardening: Anchorless only writes to /config, /data and /tmp.
+    read_only: true
+    tmpfs: [/tmp]
+    cap_drop: [ALL]
+    security_opt: ["no-new-privileges:true"]
+    mem_limit: 512m
+```
+
+Then, in that folder:
+
+```sh
+mkdir config data      # so they're yours, not root's
+docker compose up -d
+```
+
+The first start writes `config/config.toml`, with every setting explained.
+Update with `docker compose pull && docker compose up -d`.
+
+### Native
+
+```sh
+pip install anchorless   # or: uv tool install anchorless
+anchorless init          # writes config.toml here
+anchorless serve
+```
+
+ffmpeg must be on the PATH (`apt install ffmpeg`, `brew install ffmpeg`, ...).
+Run `anchorless serve` from the folder with `config.toml`, or point at it with
+`anchorless -c /path/to/config.toml serve`.
+
+### Watch
+
+Open `http://<host>:9798/` to watch in a browser, or add it to Jellyfin, Plex or
+any IPTV player as an M3U tuner (`http://<host>:9798/playlist.m3u`) with an
+XMLTV guide (`http://<host>:9798/guide.xml`).
+
+## More
+
+- [The guide](https://github.com/GabeBecker2048/anchorless/blob/main/docs/guide.md): Jellyfin setup, themes and channels, the settings
+  page, hosting publicly, and configuration
+- [`config.example.toml`](https://github.com/GabeBecker2048/anchorless/blob/main/config.example.toml): every setting, explained (what `anchorless init` writes)
+- [SECURITY.md](https://github.com/GabeBecker2048/anchorless/blob/main/SECURITY.md): reporting a vulnerability
+- [CHANGELOG.md](https://github.com/GabeBecker2048/anchorless/blob/main/CHANGELOG.md): what changed in each release
+
+Anchorless doesn't include music: point it at a folder of MP3s you have the
+right to play (`[audio] music_dir`), or it runs with just its own sound effects.
+
+## License
+
+MIT. The bundled fonts are under the SIL Open Font License and the bundled
+[mpegts.js](https://github.com/xqq/mpegts.js) player under Apache 2.0. Headlines
+belong to their outlets; see [Sources and fair use](https://github.com/GabeBecker2048/anchorless/blob/main/docs/guide.md#sources-and-fair-use).

anchorless-1.0.0/SECURITY.md

@@ -0,0 +1,47 @@
+# Security
+
+## Reporting a vulnerability
+
+Please report security problems **privately**, not in a public issue:
+use GitHub's **"Report a vulnerability"** button on this repository's
+**Security** tab. Only the maintainer can see the report.
+
+Please include what you found, how to reproduce it, and which version (or
+commit) you used. Anchorless is a hobby project, so there is no guaranteed
+response time, but reports are taken seriously: you'll get an answer, a fix
+where one is needed, and credit in the advisory if you'd like it.
+
+## Supported versions
+
+Only the latest release (and `main`) gets security fixes.
+
+| Version | Supported |
+|---|---|
+| 1.x | yes |
+
+## What counts
+
+**In scope** - for example:
+
+- getting into the settings page, or changing settings, without the password
+- getting past `[admin] allow_from`, `trusted_proxies` or `require_https`
+- making the server fetch a private-network address despite
+  `[feeds] allow_private = false`
+- reading files or secrets: the password, the config, the local feeds file
+- script injection in the viewer or settings page (headlines are untrusted)
+- a stream or request that crashes the server or exhausts its memory despite the
+  `[stream]` limits
+
+**Not a vulnerability** - by design (see "Hosting publicly" in the README):
+
+- anyone who can reach the TV side (`/playlist.m3u`, `/guide.xml`, `/live.ts`,
+  `/hls/`) or the viewer page can watch, and watching costs CPU - that is what
+  `max_sessions`, `max_viewers` and `max_viewers_per_client` are for
+- problems that need the settings password, or access to the server or its
+  config files
+- weaker setups chosen on purpose, such as `require_https = false` or a wide
+  `allow_from`
+
+## Security advisories
+
+None yet.

anchorless-1.0.0/config.example.toml

@@ -0,0 +1,175 @@
+# Anchorless configuration.
+#
+# Copy this to config.toml and change what you like. In [channel], theme and
+# show_on are required (and channel_number for a TV channel); every other
+# setting is optional, and anything left out uses the default shown here.
+#
+# Any setting can also come from the environment as ANCHORLESS__<SECTION>__<KEY>,
+# e.g. ANCHORLESS__LOCATION__CITY=Springfield. Use that for anything personal
+# (like your location) so this file can be shared.
+
+[channel]
+theme = "studio"              # required: "studio" (pixel-art news set), "classic-light" / "classic-dark"
+                              # (cable-news pages), or "classic" (light by day, dark at night)
+name = "NEWS"                 # shown in the logo and in your TV guide (default "NEWS")
+show_on = "both"              # required: "both" (TV + web page), "tv" (TV only) or "web" (web page only)
+channel_number = 101          # required for "both" and "tv" (e.g. 2, 101, 2.1); ignored for "web"
+# id = "anchorless.news"      # stable id for TV guides (tvg-id) and the stream URL
+timezone = "America/Chicago"  # for the on-screen clock and the guide
+guide_title = "Anchorless News"
+guide_description = "Around-the-clock headlines from national and world news outlets."
+guide_slot_minutes = 30        # guide blocks on :00/:30; 1440 = one per day
+
+[location]
+# Local news. Best set from the environment instead (ANCHORLESS__LOCATION__CITY=...),
+# so this file names no place:
+# city = "Springfield"        # the local segment's title
+# sources_file = "local.toml" # your local outlets' feeds (see local.example.toml),
+#                             # relative to this file. No file = no local segment.
+
+[video]
+width = 854
+height = 480
+fps = 24
+encoder = "x264"              # "x264" (CPU) or "vaapi" (Intel/AMD GPU)
+vaapi_device = "/dev/dri/renderD128"
+vaapi_rc = "vbr"              # "cqp" for older Intel GPUs (i965 driver) that reject bitrates
+vaapi_qp = 24                 # quality for "cqp" (lower = better)
+vaapi_convert = "cpu"         # "gpu" converts colours on the GPU too (less CPU; newer Intel drivers)
+bitrate = "1500k"
+maxrate = "2000k"
+gop_seconds = 2               # a keyframe every 2 s: how fast a joining viewer can start
+x264_preset = "veryfast"
+x264_threads = 0              # 0 = automatic
+
+[audio]
+music_dir = "/music"          # background music (.mp3), shuffled; missing folder = silence
+volume = 0.5
+bitrate = "128k"
+
+[stream]
+host = "0.0.0.0"
+port = 9798
+lead_seconds = 10             # rendered ahead for a new viewer (Samsung TVs buffer ~10 s)
+idle_seconds = 60             # stop encoding this long after the last viewer leaves
+max_sessions = 2              # channels encoding at once (~30% of a CPU core each); -1 = no limit,
+                              # 0 = listed but nobody can watch. Viewers of a channel already on don't count.
+max_viewers = -1              # viewers at once, all channels (TV, web, iPhone); -1 = no limit, 0 = nobody
+max_viewers_per_client = -1   # viewers from one address; -1 = no limit. Jellyfin (all its viewers
+                              # come from it) and a household behind one router are one address each.
+
+[web]                         # the viewer page; the TV side (playlist, guide, streams) is never https-only
+require_https = false         # true: viewer page only over https. Suggested if you have https - and
+                              # keep [admin] require_https on too.
+public_status = "full"        # "full": /health and the viewer page list feeds by name and site;
+                              # "summary": counts only. URLs and error details: settings page only.
+
+[rundown]
+refresh_minutes = 10          # how often the sources are fetched
+page_seconds = 12             # how long each story stays on screen
+intro_seconds = 5             # segment title card (0 = none)
+transition_seconds = 0.4      # crossfade between pages (0 = cut)
+max_story_age_hours = 12
+same_story_similarity = 0.5   # headline overlap that makes two items the same story
+same_story_text_similarity = 0.32
+
+# The newscast: segments play in order, then it loops. A story appears in the
+# first segment it fits and nowhere else. Leave out scope/category to take any story.
+# When several outlets carry a story, whose headline is shown: "first" (first
+# published), "consensus" (if that one has a red flag - loaded words, shouting, or
+# wording no other outlet shares - a clean version the others agree with), or "log"
+# (show "first"; list what consensus would change, on the settings page and in the log).
+headline_choice = "log"
+headline_margin = 0.15        # how much better a version must score to replace the shown one
+
+[[rundown.segment]]
+name = "TOP STORIES"
+stories = 4
+exclude_scope = ["local"]     # local-only stories stay in the local segment
+
+[[rundown.segment]]
+name = "{city}"                # the local segment, titled with [location] city
+stories = 3
+scope = "local"
+
+[[rundown.segment]]
+name = "NATIONAL"
+stories = 3
+scope = "national"            # local | national | world
+
+[[rundown.segment]]
+name = "WORLD"
+stories = 3
+scope = "world"
+
+[[rundown.segment]]
+name = "BUSINESS"
+stories = 2
+category = "business"
+
+[breaking]
+enabled = true
+min_sources = 4               # outlets that must carry a story...
+window_minutes = 30           # ...within this long of its first appearance
+cooldown_minutes = 20         # at most one alert per this long
+crawl_tag_minutes = 60        # how long it keeps the red BREAKING tag in the crawl
+title_prefixes = ["BREAKING:", "BREAKING NEWS:"]
+local_min_sources = 5         # a story only local outlets carry needs this many
+local_alerts = "on"           # "on", "log" (only log what would break in), or "off"
+sound = "auto"                # "auto", "chiptune", "news", "none", or a sound file's path
+sound_volume = 0.8            # the music ducks under it either way
+
+[crawl]                       # the headline crawl along the bottom, on every channel
+label = "HEADLINES"
+speed = 96                    # pixels per second at 480 lines
+
+# More channels from the same news (one fetch feeds them all). The settings are
+# the same as [channel], except that name is required here. Each channel gets its
+# own stream, drawn and encoded only while someone watches it. Add as many as you like.
+#
+# [[extra_channel]]
+# theme = "classic"
+# name = "NEWS CLASSIC"       # required for an extra channel
+# show_on = "web"
+# channel_number = 99         # ignored: show_on is "web"
+#
+# [[extra_channel]]
+# theme = "studio"
+# name = "NEWS 2"
+# show_on = "tv"
+# channel_number = 102
+
+[data]
+dir = "data"                  # SQLite memory of stories already seen
+
+# Feeds. Anchorless comes with a list of national and world outlets (NPR, NYT,
+# CBS, ABC, NBC, Fox, Guardian, BBC, Al Jazeera, CNBC). [[source]] entries are
+# added to that list; turn any feed off by its URL. Feeds with the same name
+# count as one outlet. scope: national | world (local feeds go in the local
+# feeds file, see [location]). exclude: regular expressions; matching
+# headlines or links are skipped.
+[feeds]
+builtin = true                # false: only your [[source]] entries
+disabled = []                 # feed URLs to skip, e.g. ["https://feeds.npr.org/1001/rss.xml"]
+allow_private = false         # true: allow feeds on your own network. Off, every feed request
+                              # (redirects too) must go to a public address - so a URL typed
+                              # into the settings page can't point the server at your router etc.
+
+# [[source]]
+# name = "Reuters"
+# url = "https://example.com/reuters/rss.xml"
+# scope = "world"
+# category = "general"        # "business" feeds the BUSINESS segment
+
+# The settings page (/settings) edits this file. It is off until a password is
+# set (12+ characters): either from the environment, ANCHORLESS__ADMIN__PASSWORD=...,
+# or as a hash here - run `anchorless hash-password` and paste its line:
+# password_hash = "scrypt$15$8$1$...$..."
+# The file must be writable by Anchorless (in Docker: mount its folder, not the file).
+[admin]
+allow_from = ["127.0.0.0/8", "::1/128", "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16",
+              "100.64.0.0/10", "fc00::/7", "fe80::/10"]   # who may open the settings page
+trusted_proxies = []          # e.g. ["192.168.1.2"]: your reverse proxy, so X-Forwarded-For is believed
+session_days = 30             # how long a login lasts
+require_https = true          # log in only over https (TLS, or a trusted proxy's X-Forwarded-Proto);
+                              # localhost is always allowed. false only on a network you trust.