{{ message }}
{% endif %} {% if error %}{{ error }}
{% endif %}Shared across the whole instance. Changes apply immediately after Save.
Runs nightly at the set hour (server local time): prunes feed fetch history, applies per-folder retention, sweeps tombstones, and evicts the image cache.{% if maintenance_last %} Last ran: {{ maintenance_last }}.{% endif %}
The /api/img proxy caches fetched images. Entries not viewed within the retention window are evicted nightly; larger images are downscaled to the max dimension before storing.
An image over the size budget is re-encoded to WebP — losslessly for logos, diagrams and line art, where lossy compression would smear the edges, and lossy otherwise. The dimension cap alone does not bound size.
Routes feed fetches through a SOCKS5/HTTP proxy (e.g. a gluetun VPN container on the same Docker network) — useful against ordinary geoblocks or per-IP rate limits, not against sites running real bot detection. This is the instance default; a user can override it for themselves in Settings → Account. Off everywhere until set.
FlareSolverr (real headless Chrome, purpose-built to solve Cloudflare/DDoS-Guard style challenges) — one rung past the proxy above, before the last-resort backend below. Only reached in "As needed" mode for a feed still failing with an actual challenge page (not a plain block or rate limit), and always stacked with the proxy above when one is configured. Leave blank to opt out — no token needed for an internal-network container.
Last-resort backend (e.g. a Tailscale exit node reaching a real home IP) — a different trust tier from the proxy above: real exposure cost, not a disposable datacenter address. Only reached in "As needed" mode, the last escalation rung (browser identity, then proxy, then FlareSolverr, then this), never in "Always". Leave blank to opt out entirely — an unconfigured URL is the gate. Also honors the "As needed" mode override in Settings → Account.
Repeated failed logins lock the account out for the window.
Seeds the auto-refresh setting for newly created users.
Instance-wide credentials. The email key sends on behalf of the whole instance; the OAuth apps are a shared fallback for users who haven't set their own (a user's own credentials always take priority).
One sending account for the instance (only a verified domain can send).
Register at the Google Cloud Console with {{ public_url }}/youtube/oauth/callback as an authorized redirect URI.
Register at Pinterest Developers with {{ public_url }}/integrations/pinterest/oauth/callback as a redirect URI.
Register a web app at reddit.com/prefs/apps with {{ public_url }}/integrations/reddit/oauth/callback as the redirect URI.
| User | Admin | Last active | Feeds | DB size | Actions |
|---|---|---|---|---|---|
| {{ u.username }}{% if u.disabled %} (disabled){% endif %} | {{ 'yes' if u.is_admin else '' }} | {{ u.last_active }} | {{ u.feed_count }} | {{ u.db_human }} |
{% if u.user_id != user_id %}
{% endif %}
|
Password changes and API tokens for your own account live in Lectio's Settings → Account.