I recently decided to dive a bit deeper into flows since the plugin stacks were failing on me sometimes. Cobbled together something from the examples provided, seems to work fine for me now. Depending the worker it runs on it tries to transcode with nvenc or qsv, if it fails or is not available the flow falls back to cpu transcode.

deleted by creator

I did not agree to anything. When I open the site they just start serving videos to me (even autoplay is activated by default). If they don’t want me to watch their videos without ads they should stop serving them to me (ie, put them behind a paywall)

After looking deeper into the docs they do not support and do not plan to support the Relying Party role. So it probably won’t fit for this use case.

Depending on what you are trying to do, Authelia does have OIDC in beta https://www.authelia.com/roadmap/active/openid-connect/

I use Authelia again since in beta it now supports multiple Pass/FIDO keys via the web interface, and it does work reasonably well.

Probably more. Your app can use the local API then as well. And AWS is insanely expensive, especially if you forget to block log ingestion to Cloudwatch (ask me how I know).

Well, how about having a local API and have no calls at all to your cloud infrastructure? Probably too easy and you cannot lock people into your ecosystem.