Settings + allowlists
/settings#discord-bridge is the operator control surface for Discord ingress.
It keeps bridge state visible and lets the operator change policy without
editing the bot container.
The panel includes:
- enabled / disabled toggle,
- allowed Discord user IDs,
- allowed channel IDs,
- per-minute rate limit,
- last incoming request state,
- secret configured status,
- bridge counters from
/api/discord/status.
The allowlists are server-side controls. The bot should also carry its own allowed-user configuration, but Kanade does not trust that alone. A request must pass signature, remote-address, user/channel allowlist, and rate-limit checks before it can start a lane turn.
When troubleshooting, inspect the last relay state first. It usually names the failure class: missing secret, invalid signature, user not allowed, channel not allowed, rate-limited, daemon unreachable, or lane error.