Repolode
Submit
HydroshieldMKII

HydroshieldMKII/Guardian

Access-control layer for Plex Media Server that approves or blocks devices, enforces user schedules and IP rules, caps streams, and ends violating sessions.

View on GitHub
Stars
175
Forks
7
Open issues
13
Last commit
5 days ago

What is it?

Guardian sits alongside Plex Media Server and polls its sessions API. Each active stream is matched against per-user and per-device policy, and sessions that fail the rules are terminated.

Administrators can approve, reject or hold new devices, with per-user overrides, LAN/WAN and IP allowlists, schedules and temporary grants. Global and per-user concurrent stream limits are supported. The web UI shows live sessions, stream details and searchable history.

Plex users get a portal where they can see their own devices and leave notes. Notifications can be sent by email, Apprise or in-app. It is deployed with Docker Compose and requires a reachable Plex server and a Plex token.

Key features

  • 01Approve, reject or hold devices with per-user overrides
  • 02Global and per-user concurrent stream limits
  • 03IP allowlists, LAN/WAN rules and schedules
  • 04Live sessions, stream details and searchable history
  • 05Email, Apprise and in-app notifications
  • 06User portal for viewing devices and leaving notes

Use cases

  • Household admins limiting when and where family members can stream
  • Homelab operators capping simultaneous streams on a shared Plex server
  • Restricting access from unknown devices or outside the home network

Quick start

  1. 1

    Create a folder and enter it

    mkdir -p guardian && cd guardian
  2. 2

    Download the example Docker Compose file

    curl -o docker-compose.yml https://raw.githubusercontent.com/HydroshieldMKII/Guardian/main/docker-compose.example.yml
  3. 3

    Start Guardian with Docker Compose, then open the web UI on port 3000

    docker compose up -d

Things to know

  • Requires a reachable Plex Media Server and a Plex token.
  • Licensed under PolyForm Noncommercial 1.0.0, which prohibits commercial use.

In collections

Self-hosted apps

Topics

#plex-server#access-control#self-hosted#docker#media-server#monitoring#homelab#media-player#nestjs#nextjs

FAQ

What is Guardian?
Access-control layer for Plex Media Server that approves or blocks devices, enforces user schedules and IP rules, caps streams, and ends violating sessions. Guardian sits alongside Plex Media Server and polls its sessions API. Each active stream is matched against per-user and per-device policy, and sessions that fail the rules are terminated.
Is Guardian free to use? What license does it have?
Guardian is open source under the Other license. Check the license terms before using it in commercial products.
Is Guardian still maintained?
Actively maintained. The last commit to Guardian was on Nov 3, 2026.
What can I use Guardian for?
Household admins limiting when and where family members can stream Homelab operators capping simultaneous streams on a shared Plex server Restricting access from unknown devices or outside the home network
How do I install Guardian?
Create a folder and enter it: mkdir -p guardian && cd guardian Download the example Docker Compose file: curl -o docker-compose.yml https://raw.githubusercontent.com/HydroshieldMKII/Guardian/main/docker-compose.example.yml Start Guardian with Docker Compose, then open the web UI on port 3000: docker compose up -d
Where can I get Guardian?
The source code and installation instructions are on GitHub: https://github.com/HydroshieldMKII/Guardian

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects