fixes lol

openresty/nginx.conf

@@ -33,7 +33,13 @@ http {
     lua_shared_dict rate_limit 10m;
     lua_shared_dict fingerprints 10m;  # Server-side fingerprint cache
     lua_shared_dict uberban_cache 1m;  # Uberban status cache (5 second TTL)
-    
+
+    # Initialize background thumbnail generator (runs every 10 minutes)
+    init_worker_by_lua_block {
+        local thumbnail = require "thumbnail"
+        thumbnail.init_worker()
+    }
+
     # Enable compression
     gzip on;
     gzip_vary on;
@@ -827,8 +833,9 @@ http {
         }
 
         # Stream thumbnails - 3 second animated WebP generated on-demand via FFmpeg
+        # URL uses realm name for security, Lua looks up stream_key internally
         location ~ ^/thumb/([^/]+)\.webp$ {
-            set $stream_key $1;
+            set $realm_name $1;
 
             # CORS headers for preflight
             if ($request_method = 'OPTIONS') {