🚸(frontend) allow downloading recordings with "failed to stop" status

When support manually marks a recording as "failed to stop," enable users to download the recording from the frontend. This ensures users can recover their recordings even if the automatic stop process fails.
🩹(backend) add Django admin action to update recording status manually
2026-03-11 19:19:29 +01:00 · 2026-03-11 19:19:29 +01:00
56 changed files with 198 additions and 3019 deletions
@@ -4,7 +4,7 @@ __pycache__
 **/__pycache__
 **/*.pyc
 venv
-**/.venv
+.venv

 # System-specific files
 .DS_Store
@@ -12,9 +12,6 @@ on:
    branches:
      - 'main'

-permissions:
-  contents: read
-
 env:
  DOCKER_USER: 1001:127
  DOCKER_CONTAINER_REGISTRY_HOSTNAME: docker.io
@@ -23,8 +20,6 @@ env:
 jobs:
  build-and-push-backend:
    runs-on: ubuntu-latest
-    permissions:
-      contents: read
    steps:
      -
        name: Checkout repository
@@ -48,12 +43,12 @@ jobs:
        with:
          username: ${{ secrets.DOCKER_HUB_USER }}
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}
-      -
-        name: Run trivy scan
-        uses: numerique-gouv/action-trivy-cache@main
-        with:
-          docker-build-args: '--target backend-production -f Dockerfile'
-          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-backend:${{ github.sha }}'
+#      -
+#        name: Run trivy scan
+#        uses: numerique-gouv/action-trivy-cache@main
+#        with:
+#          docker-build-args: '--target backend-production -f Dockerfile'
+#          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-backend:${{ github.sha }}'
      -
        name: Build and push
        uses: docker/build-push-action@v6
@@ -68,8 +63,6 @@ jobs:

  build-and-push-frontend-generic:
    runs-on: ubuntu-latest
-    permissions:
-      contents: read
    steps:
      -
        name: Checkout repository
@@ -93,12 +86,12 @@ jobs:
        with:
          username: ${{ secrets.DOCKER_HUB_USER }}
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}
-      -
-        name: Run trivy scan
-        uses: numerique-gouv/action-trivy-cache@main
-        with:
-          docker-build-args: '-f src/frontend/Dockerfile --target frontend-production'
-          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-frontend:${{ github.sha }}'
+#      -
+#        name: Run trivy scan
+#        uses: numerique-gouv/action-trivy-cache@main
+#        with:
+#          docker-build-args: '-f src/frontend/Dockerfile --target frontend-production'
+#          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-frontend:${{ github.sha }}'
      -
        name: Build and push
        uses: docker/build-push-action@v6
@@ -114,8 +107,6 @@ jobs:

  build-and-push-frontend-dinum:
    runs-on: ubuntu-latest
-    permissions:
-      contents: read
    steps:
      -
        name: Checkout repository
@@ -139,12 +130,12 @@ jobs:
        with:
          username: ${{ secrets.DOCKER_HUB_USER }}
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}
-      -
-        name: Run trivy scan
-        uses: numerique-gouv/action-trivy-cache@main
-        with:
-          docker-build-args: '-f docker/dinum-frontend/Dockerfile --target frontend-production'
-          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-frontend-dinum:${{ github.sha }}'
+#      -
+#        name: Run trivy scan
+#        uses: numerique-gouv/action-trivy-cache@main
+#        with:
+#          docker-build-args: '-f docker/dinum-frontend/Dockerfile --target frontend-production'
+#          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-frontend-dinum:${{ github.sha }}'
      -
        name: Build and push
        uses: docker/build-push-action@v6
@@ -160,8 +151,6 @@ jobs:

  build-and-push-summary:
    runs-on: ubuntu-latest
-    permissions:
-      contents: read
    steps:
      -
        name: Checkout repository
@@ -185,13 +174,13 @@ jobs:
        with:
          username: ${{ secrets.DOCKER_HUB_USER }}
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}
-      -
-        name: Run trivy scan
-        uses: numerique-gouv/action-trivy-cache@main
-        continue-on-error: true
-        with:
-          docker-build-args: '-f src/summary/Dockerfile --target production'
-          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-summary:${{ github.sha }}'
+#      -
+#        name: Run trivy scan
+#        uses: numerique-gouv/action-trivy-cache@main
+#        continue-on-error: true
+#        with:
+#          docker-build-args: '-f src/summary/Dockerfile --target production'
+#          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-summary:${{ github.sha }}'
          docker-context: './src/summary'
      -
        name: Build and push
@@ -208,8 +197,6 @@ jobs:

  build-and-push-agents:
    runs-on: ubuntu-latest
-    permissions:
-      contents: read
    steps:
      -
        name: Checkout repository
@@ -233,14 +220,14 @@ jobs:
        with:
          username: ${{ secrets.DOCKER_HUB_USER }}
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}
-      -
-        name: Run trivy scan
-        uses: numerique-gouv/action-trivy-cache@main
-        continue-on-error: true
-        with:
-          docker-build-args: '-f src/agents/Dockerfile --target production'
-          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-agents:${{ github.sha }}'
-          docker-context: './src/agents'
+#      -
+#        name: Run trivy scan
+#        uses: numerique-gouv/action-trivy-cache@main
+#        continue-on-error: true
+#        with:
+#          docker-build-args: '-f src/agents/Dockerfile --target production'
+#          docker-image-name: '${{ env.DOCKER_CONTAINER_REGISTRY_HOSTNAME }}/${{ env.DOCKER_CONTAINER_REGISTRY_NAMESPACE }}/meet-agents:${{ github.sha }}'
+#          docker-context: './src/agents'
      -
        name: Build and push
        uses: docker/build-push-action@v6
@@ -255,8 +242,6 @@ jobs:
          labels: ${{ steps.meta.outputs.labels }}

  notify-argocd:
-    permissions:
-      contents: read
    needs:
      - build-and-push-frontend-generic
      - build-and-push-frontend-dinum
@@ -124,17 +124,15 @@ jobs:
        uses: actions/setup-python@v6
        with:
          python-version: "3.13"
-      - name: Install uv
-        uses: astral-sh/setup-uv@v7
-      - name: Install the project
-        run: uv sync --locked --all-extras
-
+          cache: "pip"
+      - name: Install development dependencies
+        run: pip install --user .[dev]
      - name: Check code formatting with ruff
-        run: uv run ruff format . --diff
+        run: ~/.local/bin/ruff format . --diff
      - name: Lint code with ruff
-        run: uv run ruff check .
+        run: ~/.local/bin/ruff check .
      - name: Lint code with pylint
-        run: uv run pylint meet demo core
+        run: ~/.local/bin/pylint meet demo core

  lint-agents:
    runs-on: ubuntu-latest
@@ -281,10 +279,10 @@ jobs:
        uses: actions/setup-python@v6
        with:
          python-version: "3.13"
-      - name: Install uv
-        uses: astral-sh/setup-uv@v7
-      - name: Install the dependencies
-        run: uv sync --locked --all-extras
+          cache: "pip"
+
+      - name: Install development dependencies
+        run: pip install --user .[dev]

      - name: Install gettext (required to compile messages)
        run: |
@@ -292,50 +290,10 @@ jobs:
          sudo apt-get install -y gettext

      - name: Generate a MO file from strings extracted from the project
-        run: uv run python manage.py compilemessages
+        run: python manage.py compilemessages

      - name: Run tests
-        run: uv run pytest -n 2
-
-  test-summary:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    defaults:
-      run:
-        working-directory: src/summary
-
-    env:
-      APP_API_TOKEN: "test-api-token"
-      AWS_STORAGE_BUCKET_NAME: "http://meet-media-storage"
-      AWS_S3_ENDPOINT_URL: "minio:9000"
-      AWS_S3_ACCESS_KEY_ID: "meet"
-      AWS_S3_SECRET_ACCESS_KEY: "password"
-      WHISPERX_BASE_URL: "https://configure-your-url.com"
-      WHISPERX_ASR_MODEL: "large-v2"
-      WHISPERX_API_KEY: "test-whisperx-secret"
-      WHISPERX_DEFAULT_LANGUAGE: "fr"
-      LLM_BASE_URL: "https://configure-your-url.com"
-      LLM_API_KEY: "test-llm-secret"
-      LLM_MODEL: "test-llm-model"
-      WEBHOOK_API_TOKEN: "test-webhook-secret"
-      WEBHOOK_URL: "https://configure-your-url.com"
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Install Python
-        uses: actions/setup-python@v6
-        with:
-          python-version: "3.13"
-          cache: "pip"
-
-      - name: Install development dependencies
-        run: pip install --user .[dev]
-
-      - name: Run summary tests
-        run: ~/.local/bin/pytest
+        run: ~/.local/bin/pytest -n 2

  lint-front:
    runs-on: ubuntu-latest
@@ -31,7 +31,6 @@ MANIFEST

 # Translations	# Translations
 *.pot
-*.mo

 # Environments
 .env
@@ -13,8 +13,6 @@ and this project adheres to
 - ✨(helm) support celery with our Django backend #1124
 - ✨(helm) support ingress for custom background image #1124
 - ✨(backend) add authenticated user rate throttling on request-entry #1129
- ✨(backend) expose `is_active` field for Application in Django admin #1133
- ✨(file-upload) disable by default & limit count by user #1141

 ### Changed

@@ -24,21 +22,12 @@ and this project adheres to
 - ♿(frontend) improve chat toast a11y for screen readers #1109
 - ♿(frontend) improve ui and aria labels for help article links #1108
 - 🌐(frontend) improve German translation #1125
- 🔨(python-env) migrate meet main app to UV #1120
- ♻️(backend) align Application model field with `is_active` convention #1133
- 🔐(backend) avoids revealing the inactive status of an application #1135
- ⚡️(helm) reduce initialDelaySeconds and add periods seconds #1139
- 🔒️(backend) avoid information exposure through exception messages #1144
- ⬆️(dependencies) update PyJWT to v2.12.0 [SECURITY] #1151

 ### Fixed

 - 🐛(frontend) fix hand icon and queue position alignment and position #1119
 - 🩹(backend) add page_size to pagination for room endpoints #1131
 - 🐛(backend) refactor lobby throttling to use participant id #1129
- 🩹(backend) ignore non-recording uploads in storage webhook handler #1142
- 🐛(frontend) fix dimension mismatch in BackgroundCustomProcessor #1116
-

 ## [1.10.0] - 2026-03-05

@@ -13,28 +13,14 @@ RUN apk update && \
 # ---- Back-end builder image ----
 FROM base AS back-builder

+WORKDIR /builder

-ENV UV_COMPILE_BYTECODE=1
-ENV UV_LINK_MODE=copy
+# Copy required python dependencies
+COPY ./src/backend /builder

-# Disable Python downloads, because we want to use the system interpreter
-# across both images. If using a managed Python version, it needs to be
-# copied from the build image into the final image;
-ENV UV_PYTHON_DOWNLOADS=0
+RUN mkdir /install && \
+  pip install --prefix=/install .

-# install uv
-COPY --from=ghcr.io/astral-sh/uv:0.10.9 /uv /uvx /bin/
-
-WORKDIR /app
-
-
-RUN --mount=type=cache,target=/root/.cache/uv \
-  --mount=type=bind,source=src/backend/uv.lock,target=uv.lock \
-  --mount=type=bind,source=src/backend/pyproject.toml,target=pyproject.toml \
-  uv sync --locked --no-install-project --no-dev
-COPY src/backend /app
-RUN --mount=type=cache,target=/root/.cache/uv \
-  uv sync --locked --no-dev

 # ---- mails ----
 FROM node:20 AS mail-builder
@@ -44,7 +30,7 @@ COPY ./src/mail /mail/app
 WORKDIR /mail/app

 RUN yarn install --frozen-lockfile && \
-  yarn build
+    yarn build


 # ---- static link collector ----
@@ -56,17 +42,17 @@ RUN apk add \
  libmagic \
  rdfind

+# Copy installed python dependencies
+COPY --from=back-builder /install /usr/local
+
+# Copy Meet application (see .dockerignore)
+COPY ./src/backend /app/
+
 WORKDIR /app

-# Copy the application from the builder
-COPY --from=back-builder /app /app
-
-ENV PATH="/app/.venv/bin:$PATH"
-
-
 # collectstatic
 RUN DJANGO_CONFIGURATION=Build DJANGO_JWT_PRIVATE_SIGNING_KEY=Dummy \
-  python manage.py collectstatic --noinput
+    python manage.py collectstatic --noinput

 # Replace duplicated file by a symlink to decrease the overall size of the
 # final image
@@ -95,17 +81,14 @@ COPY ./docker/files/usr/local/bin/entrypoint /usr/local/bin/entrypoint
 # docker user (see entrypoint).
 RUN chmod g=u /etc/passwd

-# Copy the application from the builder
-COPY --from=back-builder /app /app
+# Copy installed python dependencies
+COPY --from=back-builder /install /usr/local
+
+# Copy Meet application (see .dockerignore)
+COPY ./src/backend /app/

 WORKDIR /app

-ENV PATH="/app/.venv/bin:$PATH"
-
-# Generate compiled translation messages
-RUN DJANGO_CONFIGURATION=Build \
-  python manage.py compilemessages --ignore=".venv/**/*"
-
 # We wrap commands run in this container by the following entrypoint that
 # creates a user on-the-fly with the container user ID (see USER) and root group
 # ID.
@@ -120,9 +103,10 @@ USER root:root
 # Install psql
 RUN apk add postgresql-client

-# Install development dependencies
-RUN --mount=from=ghcr.io/astral-sh/uv:0.10.9,source=/uv,target=/bin/uv \
-  uv sync --all-extras --locked
+# Uninstall Meet and re-install it in editable mode along with development
+# dependencies
+RUN pip uninstall -y meet
+RUN pip install -e .[dev]

 # Restore the un-privileged user running the application
 ARG DOCKER_USER
@@ -131,7 +115,7 @@ USER ${DOCKER_USER}
 # Target database host (e.g. database engine following docker compose services
 # name) & port
 ENV DB_HOST=postgresql \
-  DB_PORT=5432
+    DB_PORT=5432

 # Run django development server
 CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]
@@ -191,7 +191,6 @@ lint-pylint: ## lint back-end python sources with pylint only on changed files f

 test: ## run project tests
 	@$(MAKE) test-back-parallel
-	@$(MAKE) test-summary
 .PHONY: test

 test-back: ## run back-end tests
@@ -204,11 +203,6 @@ test-back-parallel: ## run all back-end tests in parallel
 	bin/pytest -n auto $${args:-${1}}
 .PHONY: test-back-parallel

-test-summary: ## run summary tests
-	@args="$(filter-out $@,$(MAKECMDGOALS))" && \
-	bin/pytest-summary $${args:-${1}}
-.PHONY: test-summary
-
 makemigrations:  ## run django makemigrations for the Meet project.
 	@echo "$(BOLD)Running makemigrations$(RESET)"
 	@$(COMPOSE) up -d postgresql
@@ -229,7 +223,7 @@ superuser: ## Create an admin superuser with password "admin"
 .PHONY: superuser

 back-i18n-compile: ## compile the gettext files
-	@$(MANAGE) compilemessages --ignore=".venv/**/*"
+	@$(MANAGE) compilemessages --ignore="venv/**/*"
 .PHONY: back-i18n-compile

 back-i18n-generate: ## create the .pot files used for i18n
@@ -360,13 +354,13 @@ install-external-secrets: ## install the kubernetes secrets from Vaultwarden
 .PHONY: build-k8s-cluster

 start-tilt: ## start the kubernetes cluster using kind
-	tilt up --namespace=meet -f ./bin/Tiltfile
+	tilt up -f ./bin/Tiltfile
 .PHONY: build-k8s-cluster

 start-tilt-keycloak: ## start the kubernetes cluster using kind, without Pro Connect for authentication, use keycloak
-	DEV_ENV=dev-keycloak tilt up --namespace=meet -f ./bin/Tiltfile
+	DEV_ENV=dev-keycloak tilt up -f ./bin/Tiltfile
 .PHONY: build-k8s-cluster

 start-tilt-dinum: ## start the kubernetes cluster using kind, without Pro Connect for authentication, but with DINUM styles
-	DEV_ENV=dev-dinum tilt up --namespace=meet -f ./bin/Tiltfile
+	DEV_ENV=dev-dinum tilt up -f ./bin/Tiltfile
 .PHONY: build-k8s-cluster
@@ -103,7 +103,6 @@ k8s_resource('meet-celery-backend', resource_deps=['redis'])
 k8s_resource('meet-celery-summarize', resource_deps=['redis'])
 k8s_resource('meet-celery-transcribe', resource_deps=['redis'])
 k8s_resource('meet-backend-migrate', resource_deps=['meet-backend'])
-k8s_resource('livekit-livekit-server', resource_deps=['redis'])
 k8s_resource('livekit-livekit-server-test-connection', resource_deps=['livekit-livekit-server'])
 k8s_resource('keycloak', resource_deps=['kc-postgresql'])
 k8s_resource('meet-backend-createsuperuser', resource_deps=['meet-backend-migrate'])
@@ -1,7 +0,0 @@
-#!/usr/bin/env bash
-
-source "$(dirname "${BASH_SOURCE[0]}")/_config.sh"
-
-_dc_run \
-    app-summary-dev \
-    python -m pytest "$@"
@@ -58,7 +58,7 @@ services:
      /usr/bin/mc admin config set meet notify_webhook:meet-webhook endpoint='http://app-dev:8000/api/v1.0/recordings/storage-hook/' auth_token='Bearer password' &&
      /usr/bin/mc admin service restart meet --wait --json &&
      sleep 15 &&
-      /usr/bin/mc event add meet/meet-media-storage arn:minio:sqs::meet-webhook:webhook --event put --prefix "recordings" &&
+      /usr/bin/mc event add meet/meet-media-storage arn:minio:sqs::meet-webhook:webhook --event put &&
      exit 0;"

  app-dev:
@@ -80,7 +80,6 @@ services:
    volumes:
      - ./src/backend:/app
      - ./data/static:/data/static
-      - /app/.venv
    depends_on:
        - postgresql
        - mailcatcher
@@ -106,7 +105,6 @@ services:
    volumes:
      - ./src/backend:/app
      - ./data/static:/data/static
-      - /app/.venv
    depends_on:
      - app-dev

@@ -61,10 +61,11 @@ services:
 `docker compose up -d`
 ```

-Your keycloak instance is now available on https://id.yourdomain.tld
+Your keycloak instance is now available on https://doc.yourdomain.tld

 > [!CAUTION]
 > Version of the images are set to latest, you should pin it to the desired version to avoid unwanted upgrades when pulling latest image. You can find available versions on [Keycloak registry](https://quay.io/repository/keycloak/keycloak?tab=tags).
+```

 ## Creating an OIDC Client for Meet Application

@@ -75,7 +76,7 @@ Your keycloak instance is now available on https://id.yourdomain.tld
 3. Enter the name of the realm  - `meet`.
 4. Click "Create".

-### Step 2: Create a New Client
+#### Step 2: Create a New Client

 1. Navigate to the "Clients" tab.
 2. Click on the "Create client" button.
@@ -85,7 +86,7 @@ Your keycloak instance is now available on https://id.yourdomain.tld
 1. Set the "Web Origins" to the URL of your meet application - e.g. `https://meet.example.com`.
 1. Click "Save".

-### Step 3: Get Client Credentials
+#### Step 3: Get Client Credentials

 1. Go to the "Credentials" tab.
 2. Copy the client ID (`meet` in this example) and the client secret.
@@ -71,7 +71,7 @@ backend:
  # Extra volume to manage our local custom CA and avoid to set ssl_verify: false
  extraVolumeMounts:
    - name: certs
-      mountPath: /app/.venv/lib/python3.13/site-packages/certifi/cacert.pem
+      mountPath: /usr/local/lib/python3.12/site-packages/certifi/cacert.pem
      subPath: cacert.pem

  # Extra volume to manage our local custom CA and avoid to set ssl_verify: false
@@ -28,7 +28,6 @@ AWS_S3_ENDPOINT_URL=http://minio:9000
 AWS_S3_ACCESS_KEY_ID=meet
 AWS_S3_SECRET_ACCESS_KEY=password
 MEDIA_BASE_URL=http://localhost:8083
-FILE_UPLOAD_ENABLED=True

 # OIDC
 OIDC_OP_JWKS_ENDPOINT=http://nginx:8083/realms/meet/protocol/openid-connect/certs
@@ -308,7 +308,7 @@ class ApplicationAdmin(admin.ModelAdmin):

    form = ApplicationAdminForm

-    list_display = ("id", "name", "client_id", "get_scopes_display", "is_active")
+    list_display = ("id", "name", "client_id", "get_scopes_display")
    fields = [
        "name",
        "id",
@@ -317,7 +317,6 @@ class ApplicationAdmin(admin.ModelAdmin):
        "scopes",
        "client_id",
        "client_secret",
-        "is_active",
    ]
    readonly_fields = ["id", "created_at", "updated_at"]
    inlines = [ApplicationDomainInline]
@@ -43,21 +43,6 @@ def get_frontend_configuration(request):
            "expiration_days": settings.RECORDING_EXPIRATION_DAYS,
            "max_duration": settings.RECORDING_MAX_DURATION,
        },
-        "background_image": {
-            "upload_is_enabled": settings.FILE_UPLOAD_ENABLED,
-            "max_count_by_user": settings.FILE_UPLOAD_RESTRICTIONS["background_image"][
-                "max_count_by_user"
-            ],
-            "max_size": settings.FILE_UPLOAD_RESTRICTIONS["background_image"][
-                "max_size"
-            ],
-            "allowed_extensions": settings.FILE_UPLOAD_RESTRICTIONS["background_image"][
-                "allowed_extensions"
-            ],
-            "allowed_mimetypes": settings.FILE_UPLOAD_RESTRICTIONS["background_image"][
-                "allowed_mimetypes"
-            ],
-        },
        "telephony": {
            "enabled": settings.ROOM_TELEPHONY_ENABLED,
            "phone_number": settings.ROOM_TELEPHONY_PHONE_NUMBER
@@ -13,7 +13,6 @@ class FeatureFlag:
        "recording": "RECORDING_ENABLE",
        "storage_event": "RECORDING_STORAGE_EVENT_ENABLE",
        "subtitle": "ROOM_SUBTITLE_ENABLED",
-        "file_upload": "FILE_UPLOAD_ENABLED",
    }

    @classmethod
@@ -1,6 +1,5 @@
 """Permission handlers for the Meet core app."""

-from django.conf import settings
 from django.http import Http404

 from rest_framework import permissions
@@ -117,13 +116,6 @@ class FilePermission(IsAuthenticated):
    Handling soft deletions specificities
    """

-    def has_permission(self, request, view):
-        """Allow access only to authenticated users."""
-        if not settings.FILE_UPLOAD_ENABLED:
-            raise Http404
-
-        return super().has_permission(request, view)
-
    def has_object_permission(self, request, view, obj):
        """
        Return a 404 on deleted files or if the user is not the owner
@@ -1,6 +1,7 @@
 """API endpoints"""
 # pylint: disable=too-many-lines

+import re
 import uuid
 from logging import getLogger
 from urllib.parse import unquote, urlparse
@@ -11,7 +12,6 @@ from django.db.models import Q
 from django.http import Http404
 from django.shortcuts import get_object_or_404
 from django.utils.text import slugify
-from django.utils.translation import gettext_lazy as _

 from django_filters import rest_framework as django_filters
 from rest_framework import (
@@ -33,12 +33,10 @@ from rest_framework import (

 from core import enums, models, utils
 from core.api.filters import ListFileFilter
-from core.enums import MEDIA_STORAGE_URL_PATTERN
 from core.recording.enums import FileExtension
 from core.recording.event.authentication import StorageEventAuthentication
 from core.recording.event.exceptions import (
    InvalidBucketError,
-    InvalidFilepathError,
    InvalidFileTypeError,
    ParsingEventDataError,
 )
@@ -80,6 +78,17 @@ from .feature_flag import FeatureFlag
 logger = getLogger(__name__)


+FILE_FOLDER = settings.FILE_UPLOAD_PATH
+UUID_REGEX = (
+    r"[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}"
+)
+FILE_EXT_REGEX = r"[\d\w]+"
+MEDIA_STORAGE_URL_PATTERN = re.compile(
+    f"{settings.MEDIA_URL:s}"
+    rf"(?P<key>{FILE_FOLDER:s}/(?P<pk>{UUID_REGEX:s})/\.{FILE_EXT_REGEX:s})$"
+)
+
+
 class NestedGenericViewSet(viewsets.GenericViewSet):
    """
    A generic Viewset aims to be used in a nested route context.
@@ -488,7 +497,9 @@ class RoomViewSet(
            if status_code == drf_status.HTTP_500_INTERNAL_SERVER_ERROR:
                raise e

-            return drf_response.Response({"status": "error"}, status=status_code)
+            return drf_response.Response(
+                {"status": "error", "message": str(e)}, status=status_code
+            )

    @decorators.action(
        detail=False,
@@ -755,19 +766,14 @@ class RecordingViewSet(
            recording_id = parser.get_recording_id(request.data)

        except ParsingEventDataError as e:
-            raise drf_exceptions.PermissionDenied("Invalid request data.") from e
+            raise drf_exceptions.PermissionDenied(f"Invalid request data: {e}") from e

        except InvalidBucketError as e:
-            raise drf_exceptions.PermissionDenied("Invalid bucket specified.") from e
+            raise drf_exceptions.PermissionDenied("Invalid bucket specified") from e

-        except InvalidFilepathError:
+        except InvalidFileTypeError as e:
            return drf_response.Response(
-                {"message": "Notification ignored."},
-            )
-
-        except InvalidFileTypeError:
-            return drf_response.Response(
-                {"message": "Notification ignored."},
+                {"message": f"Ignore this file type, {e}"},
            )

        try:
@@ -967,26 +973,6 @@ class FileViewSet(

    def perform_create(self, serializer):
        """Set the current user as creator of the newly created file."""
-
-        if settings.FILE_UPLOAD_APPLY_RESTRICTIONS:
-            file_type = serializer.validated_data["type"]
-            config_for_file_type = settings.FILE_UPLOAD_RESTRICTIONS[file_type]
-
-            count = models.File.objects.filter(
-                creator=self.request.user,
-                deleted_at__isnull=True,
-                type=file_type,
-            ).count()
-
-            if count >= config_for_file_type["max_count_by_user"]:
-                logger.info(
-                    "create_item: user reached max files per user for type %s",
-                    file_type,
-                )
-                raise serializers.PermissionDenied(
-                    _("You have reached the maximum number of files for this type.")
-                )
-
        serializer.save(creator=self.request.user)

    def perform_destroy(self, instance):
@@ -994,7 +980,6 @@ class FileViewSet(
        instance.soft_delete()

    @decorators.action(detail=True, methods=["post"], url_path="upload-ended")
-    @FeatureFlag.require("file_upload")
    def upload_ended(self, request, *args, **kwargs):
        """
        Check the actual uploaded file and mark it as ready.
@@ -1177,7 +1162,6 @@ class FileViewSet(
        return url_params, request.user.id, file

    @decorators.action(detail=False, methods=["get"], url_path="media-auth")
-    @FeatureFlag.require("file_upload")
    def media_auth(self, request, *args, **kwargs):
        """
        This view is used by an Nginx subrequest to control access to an file's
@@ -14,15 +14,9 @@ FILE_EXT_REGEX = r"[a-zA-Z0-9]{1,10}"

 # pylint: disable=line-too-long
 RECORDING_STORAGE_URL_PATTERN = re.compile(
-    rf"{settings.MEDIA_URL:s}{settings.RECORDING_OUTPUT_FOLDER}/(?P<recording_id>{UUID_REGEX:s})\.(?P<extension>{FILE_EXT_REGEX:s})"
+    f"/media/{settings.RECORDING_OUTPUT_FOLDER}/(?P<recording_id>{UUID_REGEX:s}).(?P<extension>{FILE_EXT_REGEX:s})"
 )

-MEDIA_STORAGE_URL_PATTERN = re.compile(
-    f"{settings.MEDIA_URL:s}"
-    rf"(?P<key>{settings.FILE_UPLOAD_PATH:s}/(?P<pk>{UUID_REGEX:s})\.{FILE_EXT_REGEX:s})$"
-)
-
-
 # Django sets `LANGUAGES` by default with all supported languages. We can use it for
 # the choice of languages which should not be limited to the few languages active in
 # the app.
@@ -203,7 +203,7 @@ class ApplicationJWTAuthentication(BaseJWTAuthentication):
            logger.warning("Application not found: %s", client_id)
            raise exceptions.AuthenticationFailed("Application not found.") from e

-        if not application.is_active:
+        if not application.active:
            logger.warning(
                "Inactive application attempted authentication: %s", client_id
            )
@@ -61,12 +61,12 @@ class ApplicationViewSet(viewsets.ViewSet):
        except models.Application.DoesNotExist as e:
            raise drf_exceptions.AuthenticationFailed("Invalid credentials") from e

+        if not application.active:
+            raise drf_exceptions.AuthenticationFailed("Application is inactive")
+
        if not check_password(client_secret, application.client_secret):
            raise drf_exceptions.AuthenticationFailed("Invalid credentials")

-        if not application.is_active:
-            raise drf_exceptions.AuthenticationFailed("Application is inactive")
-
        email = serializer.validated_data["scope"]
        try:
            validate_email(email)
@@ -129,7 +129,7 @@ class ApplicationFactory(factory.django.DjangoModelFactory):
        model = models.Application

    name = factory.Faker("company")
-    is_active = True
+    active = True
    client_id = factory.LazyFunction(utils.generate_client_id)
    client_secret = factory.LazyFunction(utils.generate_client_secret)
    scopes = []
@@ -1,18 +0,0 @@
-# Generated by Django 5.2.12 on 2026-03-11 14:39
-
-from django.db import migrations
-
-
-class Migration(migrations.Migration):
-
-    dependencies = [
-        ('core', '0017_file'),
-    ]
-
-    operations = [
-        migrations.RenameField(
-            model_name='application',
-            old_name='active',
-            new_name='is_active',
-        ),
-    ]
@@ -759,7 +759,7 @@ class Application(BaseModel):
        verbose_name=_("Application name"),
        help_text=_("Descriptive name for this application."),
    )
-    is_active = models.BooleanField(default=True)
+    active = models.BooleanField(default=True)
    client_id = models.CharField(
        max_length=100, unique=True, default=utils.generate_client_id
    )
@@ -952,7 +952,7 @@ class File(BaseModel):
        _, extension = splitext(self.filename)
        # We store only the extension in the storage system to avoid
        # leaking Personal Information in logs, etc.
-        return f"{self.key_base}{extension!s}"
+        return f"{self.key_base}/{extension!s}"

    def get_abilities(self, user):
        """
@@ -9,8 +9,6 @@ from typing import Any, Dict, Optional, Protocol
 from django.conf import settings
 from django.utils.module_loading import import_string

-from core.enums import FILE_EXT_REGEX, UUID_REGEX
-
 from .exceptions import (
    InvalidBucketError,
    InvalidFilepathError,
@@ -88,7 +86,7 @@ class MinioParser:

        # pylint: disable=line-too-long
        self._filepath_regex = re.compile(
-            rf"(?P<url_encoded_folder_path>(?:[^%]+%2F)+)?{settings.RECORDING_OUTPUT_FOLDER}%2F(?P<recording_id>{UUID_REGEX})\.(?P<extension>{FILE_EXT_REGEX})"
+            r"(?P<url_encoded_folder_path>(?:[^%]+%2F)+)?(?P<recording_id>[0-9a-fA-F\-]{36})\.(?P<extension>[a-zA-Z0-9]+)"
        )

    @staticmethod
@@ -118,7 +118,7 @@ def test_api_files_create_file_authenticated_success():

    assert policy_parsed.scheme == "http"
    assert policy_parsed.netloc == "localhost:9000"
-    assert policy_parsed.path == f"/meet-media-storage/files/{file.id!s}.png"
+    assert policy_parsed.path == f"/meet-media-storage/files/{file.id!s}/.png"

    query_params = parse_qs(policy_parsed.query)

@@ -174,26 +174,6 @@ def test_api_files_create_file_authenticated_extension_case_insensitive():
    assert file.title == "file"


-def test_api_files_create_file_disabled(settings):
-    """
-    Creating a file is denied if file upload is disabled
-    """
-    settings.FILE_UPLOAD_ENABLED = False
-    user = factories.UserFactory()
-    client = APIClient()
-    client.force_login(user)
-    response = client.post(
-        "/api/v1.0/files/",
-        {
-            "type": FileTypeChoices.BACKGROUND_IMAGE,
-            "filename": "file.JPG",
-        },
-        format="json",
-    )
-    assert response.status_code == 404
-    assert not File.objects.exists()
-
-
 def test_api_files_create_file_authenticated_not_checking_extension(settings):
    """
    Creating a file with an extension not allowed should not fail when restrictions are disabled.
@@ -259,48 +239,6 @@ def test_api_files_create_file_authenticated_hidden_file_but_checking_extension_
    assert response.json() == {"filename": ["This file extension is not allowed."]}


-def test_api_files_create_file_too_many(
-    settings,
-):
-    """
-    Creating a file is forbidden if above user limit.
-    """
-    settings.FILE_UPLOAD_APPLY_RESTRICTIONS = True
-    settings.FILE_UPLOAD_RESTRICTIONS = {
-        "background_image": {
-            **settings.FILE_UPLOAD_RESTRICTIONS["background_image"],
-            "max_count_by_user": 1,
-        },
-    }
-
-    user = factories.UserFactory()
-    client = APIClient()
-    client.force_login(user)
-    response = client.post(
-        "/api/v1.0/files/",
-        {
-            "type": FileTypeChoices.BACKGROUND_IMAGE,
-            "filename": "1.png",
-        },
-    )
-
-    assert response.status_code == 201
-
-    response = client.post(
-        "/api/v1.0/files/",
-        {
-            "type": FileTypeChoices.BACKGROUND_IMAGE,
-            "filename": "2.png",
-        },
-    )
-
-    assert response.status_code == 403
-    assert response.json() == {
-        "detail": "You have reached the maximum number of files for this type."
-    }
-    assert File.objects.count() == 1
-
-
 def test_api_files_create_force_id_success():
    """It should be possible to force the item ID when creating a   item."""
    user = factories.UserFactory()
@@ -39,7 +39,7 @@ def test_api_files_update_anonymous_forbidden():

 def test_api_files_update_description_and_title():
    """
-    Test the description and title of a file can be updated.
+    Test the description and title of an file can be updated.
    """
    user = factories.UserFactory()

@@ -32,7 +32,7 @@ def valid_minio_event():
                "s3": {
                    "bucket": {"name": "test-bucket"},
                    "object": {
-                        "key": "recordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
+                        "key": "recording%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
                        "contentType": "audio/ogg",
                    },
                }
@@ -51,7 +51,7 @@ def test_parse_valid_event(minio_parser, valid_minio_event):
    """Test parsing a valid Minio event."""
    event = minio_parser.parse(valid_minio_event)
    assert isinstance(event, StorageEvent)
-    assert event.filepath == "recordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg"
+    assert event.filepath == "recording%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg"
    assert event.filetype == "audio/ogg"
    assert event.bucket_name == "test-bucket"
    assert event.metadata is None
@@ -130,13 +130,11 @@ def test_validate_invalid_filetype(minio_parser):
    "invalid_filepath",
    [
        "invalid_filepath",  # totally invalid string
-        "recordings/46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
-        "recordings/46d1a121-2426-484d-8fb3-09b5d886f7a8",  # missing extension
+        "recording/46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
+        "recording/46d1a121-2426-484d-8fb3-09b5d886f7a8",  # missing extension
        "46d1a121-2426-484d-8fb3-09b5d886f7a8",  # missing url_encoded_folder_path and extension
        "",  # empty string
-        "46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",  # no folder at all
-        "uploads%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",  # wrong folder name
-        "folder%2Fuploads%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",  # nested but no recordings/
+        "recording%2F46d1a1212426484d8fb309b5d886f7a8.ogg",
    ],
 )
 def test_validate_invalid_filepath(invalid_filepath, minio_parser):
@@ -154,7 +152,7 @@ def test_validate_invalid_filepath(invalid_filepath, minio_parser):
 def test_validate_valid_event(minio_parser):
    """Test validation with valid event data."""
    event = StorageEvent(
-        filepath="recordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
+        filepath="recording%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
        filetype="audio/ogg",
        bucket_name="test-bucket",
        metadata=None,
@@ -172,7 +170,7 @@ def test_get_recording_id_success(minio_parser, valid_minio_event):
 def test_validate_filepath_with_folder(minio_parser):
    """Test validation of filepath with folder structure."""
    event = StorageEvent(
-        filepath="parent_folder%2Frecordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
+        filepath="parent_folder%2Ffolder%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
        filetype="audio/ogg",
        bucket_name="test-bucket",
        metadata=None,
@@ -221,7 +219,7 @@ def test_validate_custom_filetypes():
    parser = MinioParser(bucket_name="test-bucket", allowed_filetypes={"audio/mp3"})

    event = StorageEvent(
-        filepath="parent_folder%2Frecordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
+        filepath="parent_folder%2Ffolder%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
        filetype="audio/mp3",
        bucket_name="test-bucket",
        metadata=None,
@@ -14,7 +14,6 @@ from ...factories import RecordingFactory
 from ...models import Recording, RecordingStatusChoices
 from ...recording.event.exceptions import (
    InvalidBucketError,
-    InvalidFilepathError,
    InvalidFileTypeError,
    ParsingEventDataError,
 )
@@ -95,7 +94,7 @@ def test_save_recording_parsing_error(recording_settings, mock_get_parser, clien
    )

    assert response.status_code == 403
-    assert response.json() == {"detail": "Invalid request data."}
+    assert response.json() == {"detail": "Invalid request data: Error message"}


 def test_save_recording_bucket_error(recording_settings, mock_get_parser, client):
@@ -112,7 +111,7 @@ def test_save_recording_bucket_error(recording_settings, mock_get_parser, client
    )

    assert response.status_code == 403
-    assert response.json() == {"detail": "Invalid bucket specified."}
+    assert response.json() == {"detail": "Invalid bucket specified"}


 def test_save_recording_filetype_error(recording_settings, mock_get_parser):
@@ -133,28 +132,7 @@ def test_save_recording_filetype_error(recording_settings, mock_get_parser):
    )

    assert response.status_code == 200
-    assert response.json() == {"message": "Notification ignored."}
-
-
-def test_save_recording_filepath_error(recording_settings, mock_get_parser):
-    """Test handling of unsupported filepath in recording event data."""
-
-    mock_parser = mock.Mock()
-    mock_parser.get_recording_id.side_effect = InvalidFilepathError(
-        "Invalid filepath structure: parent/folder/recording.jpeg"
-    )
-    mock_get_parser.return_value = mock_parser
-
-    client = APIClient()
-
-    response = client.post(
-        "/api/v1.0/recordings/storage-hook/",
-        {"recording_data": "valid-data"},
-        HTTP_AUTHORIZATION="Bearer testAuthToken",
-    )
-
-    assert response.status_code == 200
-    assert response.json() == {"message": "Notification ignored."}
+    assert response.json() == {"message": "Ignore this file type, unsupported '.json'"}


 def test_save_recording_unknown_recording(recording_settings, mock_get_parser, client):
@@ -77,6 +77,7 @@ def test_missing_auth_header(client, serialized_event_data, mock_livekit_config)
    assert response.status_code == 401
    assert response.json() == {
        "status": "error",
+        "message": "Authorization header missing",
    }


@@ -90,7 +91,7 @@ def test_invalid_payload(client, auth_token, mock_livekit_config):
    )

    assert response.status_code == 400
-    assert response.json() == {"status": "error"}
+    assert response.json() == {"status": "error", "message": "Invalid webhook payload"}


 def test_unknown_event_type(client, mock_livekit_config):
@@ -115,6 +116,7 @@ def test_unknown_event_type(client, mock_livekit_config):
    assert response.status_code == 422
    assert response.json() == {
        "status": "error",
+        "message": "Unknown webhook type: unknown_event_type",
    }


@@ -904,7 +904,7 @@ def test_api_rooms_token_unknown_application(settings):

 def test_api_rooms_token_inactive_application(settings):
    """Token for inactive application should be rejected."""
-    application = ApplicationFactory(is_active=False)
+    application = ApplicationFactory(active=False)

    now = datetime.now(timezone.utc)
    payload = {
@@ -23,7 +23,7 @@ def test_api_applications_generate_token_success(settings):
    """Valid credentials should return a JWT token."""
    UserFactory(email="User.Family@example.com")
    application = ApplicationFactory(
-        is_active=True,
+        active=True,
        scopes=[ApplicationScope.ROOMS_LIST, ApplicationScope.ROOMS_CREATE],
    )

@@ -79,7 +79,7 @@ def test_api_applications_generate_token_invalid_client_id():
 def test_api_applications_generate_token_invalid_client_secret():
    """Invalid client_secret should return 401."""
    user = UserFactory(email="user@example.com")
-    application = ApplicationFactory(is_active=True)
+    application = ApplicationFactory(active=True)

    client = APIClient()
    response = client.post(
@@ -100,7 +100,7 @@ def test_api_applications_generate_token_invalid_client_secret():
 def test_api_applications_generate_token_inactive_application():
    """Inactive application should return 401."""
    user = UserFactory(email="user@example.com")
-    application = ApplicationFactory(is_active=False)
+    application = ApplicationFactory(active=False)

    plain_secret = "test-secret-123"
    application.client_secret = plain_secret
@@ -122,31 +122,9 @@ def test_api_applications_generate_token_inactive_application():
    assert "Application is inactive" in str(response.data)


-def test_api_applications_generate_token_inactive_application_wrong_secret():
-    """An inactive application with a wrong secret should return 401."""
-    user = UserFactory(email="user@example.com")
-    application = ApplicationFactory(is_active=False)
-
-    client = APIClient()
-    response = client.post(
-        "/external-api/v1.0/application/token/",
-        {
-            "client_id": application.client_id,
-            "client_secret": "wrong-secret",
-            "grant_type": "client_credentials",
-            "scope": user.email,
-        },
-        format="json",
-    )
-
-    assert response.status_code == 401
-    assert "Invalid credentials" in str(response.data)
-    assert "inactive" not in str(response.data).lower()
-
-
 def test_api_applications_generate_token_invalid_email_format():
    """Invalid email format should return 400."""
-    application = ApplicationFactory(is_active=True)
+    application = ApplicationFactory(active=True)

    plain_secret = "test-secret-123"
    application.client_secret = plain_secret
@@ -171,7 +149,7 @@ def test_api_applications_generate_token_invalid_email_format():
 def test_api_applications_generate_token_domain_not_authorized():
    """Application without domain authorization should return 403."""
    user = UserFactory(email="user@denied.com")
-    application = ApplicationFactory(is_active=True)
+    application = ApplicationFactory(active=True)
    ApplicationDomainFactory(application=application, domain="allowed.com")

    plain_secret = "test-secret-123"
@@ -198,7 +176,7 @@ def test_api_applications_generate_token_domain_authorized():
    """Application with domain authorization should succeed."""
    user = UserFactory(email="user@allowed.com")
    application = ApplicationFactory(
-        is_active=True,
+        active=True,
        scopes=[ApplicationScope.ROOMS_LIST],
    )
    ApplicationDomainFactory(application=application, domain="allowed.com")
@@ -225,7 +203,7 @@ def test_api_applications_generate_token_domain_authorized():

 def test_api_applications_generate_token_user_not_found():
    """Non-existent user should return 404."""
-    application = ApplicationFactory(is_active=True)
+    application = ApplicationFactory(active=True)

    plain_secret = "test-secret-123"
    application.client_secret = plain_secret
@@ -253,7 +231,7 @@ def test_api_applications_token_payload_structure(settings):
    user = UserFactory(email="user@example.com")

    application = ApplicationFactory(
-        is_active=True,
+        active=True,
        scopes=[ApplicationScope.ROOMS_LIST, ApplicationScope.ROOMS_CREATE],
    )

@@ -306,7 +284,7 @@ def test_api_applications_token_new_user(settings):
    assert len(User.objects.all()) == 0

    application = ApplicationFactory(
-        is_active=True,
+        active=True,
        scopes=[ApplicationScope.ROOMS_LIST, ApplicationScope.ROOMS_CREATE],
    )

@@ -364,7 +342,7 @@ def test_api_applications_token_existing_user(settings):
    assert len(User.objects.all()) == 1

    application = ApplicationFactory(
-        is_active=True,
+        active=True,
        scopes=[ApplicationScope.ROOMS_LIST, ApplicationScope.ROOMS_CREATE],
    )

@@ -41,7 +41,7 @@ def test_models_application_name_maxlength():
 def test_models_application_active_default():
    """An application should be active by default."""
    application = Application.objects.create(name="Test App")
-    assert application.is_active is True
+    assert application.active is True


 def test_models_application_scopes_default():
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-03-12 13:46+0000\n"
+"POT-Creation-Date: 2026-03-11 17:31+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -76,11 +76,11 @@ msgstr "%(count)s Aufnahme(n) erfolgreich als ‚Fehler beim Stoppen‘ markiert
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "%(count)s abgelaufene Aufnahme(n) übersprungen."

-#: core/admin.py:342
+#: core/admin.py:341
 msgid "No scopes"
 msgstr "Keine Scopes"

-#: core/admin.py:344
+#: core/admin.py:343
 msgid "Scopes"
 msgstr "Scopes"

@@ -98,10 +98,6 @@ msgstr ""
 msgid "This file extension is not allowed."
 msgstr "Diese Dateiendung ist nicht erlaubt."

-#: core/api/serializers.py:533
-msgid "You have reached the maximum number of files for this type."
-msgstr "Sie haben die maximale Anzahl an Dateien dieses Typs erreicht."
-
 #: core/models.py:37
 msgid "Member"
 msgstr "Mitglied"
@@ -604,18 +600,18 @@ msgstr ""
 " Wenn Sie Fragen haben oder Unterstützung benötigen, wenden Sie sich bitte "
 "an unser Support-Team unter %(support_email)s. "

-#: meet/settings.py:223
+#: meet/settings.py:215
 msgid "English"
 msgstr "Englisch"

-#: meet/settings.py:224
+#: meet/settings.py:216
 msgid "French"
 msgstr "Französisch"

-#: meet/settings.py:225
+#: meet/settings.py:217
 msgid "Dutch"
 msgstr "Niederländisch"

-#: meet/settings.py:226
+#: meet/settings.py:218
 msgid "German"
 msgstr "Deutsch"
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-03-12 13:46+0000\n"
+"POT-Creation-Date: 2026-03-11 17:31+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -76,11 +76,11 @@ msgstr "%(count)s recording(s) successfully marked as 'Failed to Stop'."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "Skipped %(count)s expired recording(s)."

-#: core/admin.py:342
+#: core/admin.py:341
 msgid "No scopes"
 msgstr "No scopes"

-#: core/admin.py:344
+#: core/admin.py:343
 msgid "Scopes"
 msgstr "Scopes"

@@ -96,10 +96,6 @@ msgstr "You must be administrator or owner of a room to add accesses to it."
 msgid "This file extension is not allowed."
 msgstr "This file extension is not allowed."

-#: core/api/serializers.py:533
-msgid "You have reached the maximum number of files for this type."
-msgstr "You have reached the maximum number of files for this type."
-
 #: core/models.py:37
 msgid "Member"
 msgstr "Member"
@@ -600,18 +596,18 @@ msgstr ""
 " If you have any questions or need assistance, please contact our support "
 "team at %(support_email)s. "

-#: meet/settings.py:223
+#: meet/settings.py:215
 msgid "English"
 msgstr "English"

-#: meet/settings.py:224
+#: meet/settings.py:216
 msgid "French"
 msgstr "French"

-#: meet/settings.py:225
+#: meet/settings.py:217
 msgid "Dutch"
 msgstr "Dutch"

-#: meet/settings.py:226
+#: meet/settings.py:218
 msgid "German"
 msgstr "German"
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-03-12 13:46+0000\n"
+"POT-Creation-Date: 2026-03-11 17:31+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: antoine.lebaud@mail.numerique.gouv.fr\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -68,8 +68,7 @@ msgstr "Marquer les enregistrements sélectionnés comme « Échec d’arrêt »
 #: core/admin.py:218
 #, python-format
 msgid "%(count)s recording(s) successfully marked as 'Failed to Stop'."
-msgstr ""
-"%(count)s enregistrement(s) marqué(s) avec succès comme « Échec d’arrêt »."
+msgstr "%(count)s enregistrement(s) marqué(s) avec succès comme « Échec d’arrêt »."

 #: core/admin.py:226
 #, fuzzy, python-format
@@ -77,11 +76,11 @@ msgstr ""
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "%(count)s enregistrement(s) avec un statut inéligible ignoré(s)."

-#: core/admin.py:342
+#: core/admin.py:341
 msgid "No scopes"
 msgstr "Aucun scopes"

-#: core/admin.py:344
+#: core/admin.py:343
 msgid "Scopes"
 msgstr "Scopes"

@@ -99,10 +98,6 @@ msgstr ""
 msgid "This file extension is not allowed."
 msgstr "Cette extension n'est pas autorisée"

-#: core/api/serializers.py:533
-msgid "You have reached the maximum number of files for this type."
-msgstr "Vous avez atteint le nombre maximum de fichiers de ce type"
-
 #: core/models.py:37
 msgid "Member"
 msgstr "Membre"
@@ -606,18 +601,18 @@ msgstr ""
 " Si vous avez des questions ou besoin d'assistance, veuillez contacter notre "
 "équipe d'assistance à %(support_email)s. "

-#: meet/settings.py:223
+#: meet/settings.py:215
 msgid "English"
 msgstr "Anglais"

-#: meet/settings.py:224
+#: meet/settings.py:216
 msgid "French"
 msgstr "Français"

-#: meet/settings.py:225
+#: meet/settings.py:217
 msgid "Dutch"
 msgstr "Néerlandais"

-#: meet/settings.py:226
+#: meet/settings.py:218
 msgid "German"
 msgstr "Allemand"
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-03-12 13:46+0000\n"
+"POT-Creation-Date: 2026-03-11 17:31+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -76,11 +76,11 @@ msgstr "%(count)s opname(s) succesvol gemarkeerd als 'Mislukt bij stoppen'."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "%(count)s opname(s) met een niet-toegestane status overgeslagen."

-#: core/admin.py:342
+#: core/admin.py:341
 msgid "No scopes"
 msgstr "Geen scopes"

-#: core/admin.py:344
+#: core/admin.py:343
 msgid "Scopes"
 msgstr "Scopes"

@@ -97,10 +97,6 @@ msgstr ""
 msgid "This file extension is not allowed."
 msgstr "Deze bestandsextensie is niet toegestaan."

-#: core/api/serializers.py:533
-msgid "You have reached the maximum number of files for this type."
-msgstr "Het maximale aantal bestanden voor dit type is bereikt."
-
 #: core/models.py:37
 msgid "Member"
 msgstr "Lid"
@@ -599,18 +595,18 @@ msgstr ""
 " Als je vragen hebt of hulp nodig hebt, neem dan contact op met ons support "
 "team via %(support_email)s. "

-#: meet/settings.py:223
+#: meet/settings.py:215
 msgid "English"
 msgstr "Engels"

-#: meet/settings.py:224
+#: meet/settings.py:216
 msgid "French"
 msgstr "Frans"

-#: meet/settings.py:225
+#: meet/settings.py:217
 msgid "Dutch"
 msgstr "Nederlands"

-#: meet/settings.py:226
+#: meet/settings.py:218
 msgid "German"
 msgstr "Duits"
@@ -176,13 +176,6 @@ class Base(Configuration):
        environ_prefix=None,
    )

-    FILE_UPLOAD_ENABLED = values.BooleanValue(
-        # False to avoid a breaking change for now
-        default=False,
-        environ_name="FILE_UPLOAD_ENABLED",
-        environ_prefix=None,
-    )
-
    FILE_UPLOAD_PATH = values.Value(
        "files", environ_name="FILE_UPLOAD_PATH", environ_prefix=None
    )
@@ -195,7 +188,6 @@ class Base(Configuration):
        {
            "background_image": {
                "max_size": 2 * MB,
-                "max_count_by_user": 10,
                "allowed_extensions": [".jpeg", ".jpg", ".png"],
                "allowed_mimetypes": ["image/jpeg", "image/png"],
            },
@@ -981,7 +973,6 @@ class Test(Base):
    APPLICATION_JWT_AUDIENCE = "Test inc."

    CELERY_TASK_ALWAYS_EAGER = True
-    FILE_UPLOAD_ENABLED = True

    def __init__(self):
        # pylint: disable=invalid-name
@@ -2,8 +2,8 @@
 # Meet package
 #
 [build-system]
-requires = ["uv_build>=0.10.9,<0.11.0"]
-build-backend = "uv_build"
+requires = ["setuptools"]
+build-backend = "setuptools.build_meta"

 [project]
 name = "meet"
@@ -21,7 +21,8 @@ classifiers = [
 ]
 description = "A simple video and phone conferencing tool, powered by LiveKit"
 keywords = ["Django", "Contacts", "Templates", "RBAC"]
-license = "MIT"
+license = { file = "LICENSE" }
+readme = "README.md"
 requires-python = ">=3.13"
 dependencies = [
    "boto3==1.42.49",
@@ -52,7 +53,7 @@ dependencies = [
    "nested-multipart-parser==1.6.0",
    "psycopg[binary]==3.3.2",
    "pydantic==2.12.4",
-    "PyJWT==2.12.0",
+    "PyJWT==2.11.0",
    "python-frontmatter==1.1.0",
    "python-magic==0.4.27",
    "requests==2.32.5",
@@ -69,7 +70,7 @@ dependencies = [
 "Homepage" = "https://github.com/suitenumerique/meet"
 "Repository" = "https://github.com/suitenumerique/meet"

-[dependency-groups]
+[project.optional-dependencies]
 dev = [
    "django-extensions==4.1",
    "drf-spectacular-sidecar==2026.1.1",
@@ -89,13 +90,12 @@ dev = [
    "types-requests==2.32.4.20260107",
 ]

-[tool.uv.build-backend]
-module-root = ""
-source-exclude = [
-    "**/tests/**",
-    "**/test_*.py",
-    "**/tests.py",
-]
+[tool.setuptools]
+packages = { find = { where = ["."], exclude = ["tests"] } }
+zip-safe = true
+
+[tool.distutils.bdist_wheel]
+universal = true

 [tool.ruff]
 exclude = [
@@ -187,7 +187,7 @@ export class BackgroundCustomProcessor implements BackgroundProcessorInterface {
      0,
      0,
      PROCESSING_WIDTH,
-      PROCESSING_HEIGHT
+      PROCESSING_WIDTH
    )
  }

@@ -71,7 +71,7 @@ backend:
    SUMMARY_SERVICE_API_TOKEN: password
    RECORDING_DOWNLOAD_BASE_URL: https://meet.127.0.0.1.nip.io/recording
    ROOM_TELEPHONY_ENABLED: True
-    SSL_CERT_FILE: /app/.venv/lib/python3.13/site-packages/certifi/cacert.pem
+    SSL_CERT_FILE: /usr/local/lib/python3.12/site-packages/certifi/cacert.pem


  migrate:
@@ -100,7 +100,7 @@ backend:
  # Extra volume mounts to manage our local custom CA and avoid to set ssl_verify: false
  extraVolumeMounts:
    - name: certs
-      mountPath: /app/.venv/lib/python3.13/site-packages/certifi/cacert.pem
+      mountPath: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
      subPath: cacert.pem

  # Extra volumes to manage our local custom CA and avoid to set ssl_verify: false
@@ -75,7 +75,7 @@ backend:
    ROOM_TELEPHONY_ENABLED: True
    ROOM_TELEPHONY_DEFAULT_COUNTRY: 'FR'
    ROOM_TELEPHONY_PHONE_NUMBER: '+33901020304'
-    SSL_CERT_FILE: /app/.venv/lib/python3.13/site-packages/certifi/cacert.pem
+    SSL_CERT_FILE: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
    ROOM_SUBTITLE_ENABLED: True
    EXTERNAL_API_ENABLED: True
    APPLICATION_JWT_AUDIENCE: https://meet.127.0.0.1.nip.io/external-api/v1.0/
@@ -113,7 +113,7 @@ backend:
  # Extra volume mounts to manage our local custom CA and avoid to set ssl_verify: false
  extraVolumeMounts:
    - name: certs
-      mountPath: /app/.venv/lib/python3.13/site-packages/certifi/cacert.pem
+      mountPath: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
      subPath: cacert.pem

  # Extra volumes to manage our local custom CA and avoid to set ssl_verify: false
@@ -94,7 +94,7 @@ backend:
        key: BREVO_API_KEY
    BREVO_API_CONTACT_LIST_IDS: 8
    ROOM_TELEPHONY_ENABLED: True
-    SSL_CERT_FILE: /app/.venv/lib/python3.13/site-packages/certifi/cacert.pem
+    SSL_CERT_FILE: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem


  migrate:
@@ -123,7 +123,7 @@ backend:
  # Extra volume mounts to manage our local custom CA and avoid to set ssl_verify: false
  extraVolumeMounts:
    - name: certs
-      mountPath: /app/.venv/lib/python3.13/site-packages/certifi/cacert.pem
+      mountPath: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
      subPath: cacert.pem

  # Extra volumes to manage our local custom CA and avoid to set ssl_verify: false
@@ -112,7 +112,7 @@ spec:
            /usr/bin/mc mb meet/meet-media-storage && \
            exit 0
      restartPolicy: Never
-  backoffLimit: 3
+  backoffLimit: 1
 ---
 apiVersion: batch/v1
 kind: Job
@@ -132,7 +132,7 @@ spec:
            /usr/bin/mc admin config set meet notify_webhook:meet-webhook endpoint="https://meet.127.0.0.1.nip.io/api/v1.0/recordings/storage-hook/" auth_token="Bearer password" && \
            /usr/bin/mc admin service restart meet --wait --json && \
            sleep 15 && \
-            /usr/bin/mc event add meet/meet-media-storage arn:minio:sqs::meet-webhook:webhook --event put --prefix "recordings" && \
+            /usr/bin/mc event add meet/meet-media-storage arn:minio:sqs::meet-webhook:webhook --event put && \
            exit 0
      restartPolicy: Never
-  backoffLimit: 3
+  backoffLimit: 1
@@ -279,28 +279,22 @@ backend:
  ## @param backend.probes.liveness.path [nullable] Configure path for backend HTTP liveness probe
  ## @param backend.probes.liveness.targetPort [nullable] Configure port for backend HTTP liveness probe
  ## @param backend.probes.liveness.initialDelaySeconds [nullable] Configure initial delay for backend liveness probe
-  ## @param backend.probes.liveness.periodSeconds [nullable] Configure period for backend liveness probe
-  ## @param backend.probes.liveness.timeoutSeconds [nullable] Configure timeout for backend liveness probe
+  ## @param backend.probes.liveness.initialDelaySeconds [nullable] Configure timeout for backend liveness probe
  ## @param backend.probes.startup.path [nullable] Configure path for backend HTTP startup probe
  ## @param backend.probes.startup.targetPort [nullable] Configure port for backend HTTP startup probe
  ## @param backend.probes.startup.initialDelaySeconds [nullable] Configure initial delay for backend startup probe
-  ## @param backend.probes.startup.periodSeconds [nullable] Configure period for backend startup probe
-  ## @param backend.probes.startup.timeoutSeconds [nullable] Configure timeout for backend startup probe
+  ## @param backend.probes.startup.initialDelaySeconds [nullable] Configure timeout for backend startup probe
  ## @param backend.probes.readiness.path [nullable] Configure path for backend HTTP readiness probe
  ## @param backend.probes.readiness.targetPort [nullable] Configure port for backend HTTP readiness probe
  ## @param backend.probes.readiness.initialDelaySeconds [nullable] Configure initial delay for backend readiness probe
-  ## @param backend.probes.readiness.periodSeconds [nullable] Configure period for backend readiness probe
-  ## @param backend.probes.readiness.timeoutSeconds [nullable] Configure timeout for backend readiness probe
+  ## @param backend.probes.readiness.initialDelaySeconds [nullable] Configure timeout for backend readiness probe
  probes:
    liveness:
      path: /__heartbeat__
-      initialDelaySeconds: 5
-      periodSeconds: 30
-
+      initialDelaySeconds: 30
    readiness:
      path: /__lbheartbeat__
-      initialDelaySeconds: 5
-      periodSeconds: 30
+      initialDelaySeconds: 30

  ## @param backend.resources Resource requirements for the backend container
  resources: {}
@@ -561,29 +555,23 @@ summary:

  ## @param summary.probes.liveness.path [nullable] Configure path for summary HTTP liveness probe
  ## @param summary.probes.liveness.targetPort [nullable] Configure port for summary HTTP liveness probe
-  ## @param summary.probes.liveness.initialDelaySeconds [nullable] Configure initial delay summary liveness probe
-  ## @param summary.probes.liveness.periodSeconds [nullable] Configure the period for the summary liveness probe
-  ## @param summary.probes.liveness.timeoutSeconds [nullable] Configure timeout for summary liveness probe
+  ## @param summary.probes.liveness.initialDelaySeconds [nullable] Configure initial delay for summary liveness probe
+  ## @param summary.probes.liveness.initialDelaySeconds [nullable] Configure timeout for summary liveness probe
  ## @param summary.probes.startup.path [nullable] Configure path for summary HTTP startup probe
  ## @param summary.probes.startup.targetPort [nullable] Configure port for summary HTTP startup probe
  ## @param summary.probes.startup.initialDelaySeconds [nullable] Configure initial delay for summary startup probe
-  ## @param summary.probes.startup.periodSeconds [nullable] Configure period for the summary startup probe
-  ## @param summary.probes.startup.timeoutSeconds [nullable] Configure timeout for summary startup probe
+  ## @param summary.probes.startup.initialDelaySeconds [nullable] Configure timeout for summary startup probe
  ## @param summary.probes.readiness.path [nullable] Configure path for summary HTTP readiness probe
  ## @param summary.probes.readiness.targetPort [nullable] Configure port for summary HTTP readiness probe
  ## @param summary.probes.readiness.initialDelaySeconds [nullable] Configure initial delay for summary readiness probe
-  ## @param summary.probes.readiness.periodSeconds [nullable] Configure period for the summary readiness probe
-  ## @param summary.probes.readiness.timeoutSeconds [nullable] Configure timeout for summary readiness probe
+  ## @param summary.probes.readiness.initialDelaySeconds [nullable] Configure timeout for summary readiness probe
  probes:
    liveness:
      path: /__heartbeat__
-      initialDelaySeconds: 5
-      periodSeconds: 30
+      initialDelaySeconds: 30
    readiness:
      path: /__lbheartbeat__
-      initialDelaySeconds: 5
-      periodSeconds: 30
-
+      initialDelaySeconds: 30

  ## @param summary.resources Resource requirements for the summary container
  resources: {}
@@ -21,16 +21,8 @@ dependencies = [
 [project.optional-dependencies]
 dev = [
    "ruff==0.14.4",
-    "pytest==9.0.2",
-    "responses>=0.25.8",
 ]

-[tool.pytest.ini_options]
-markers = [
-    "api: Test the API",
-]
-testpaths = ["tests"]
-
 [build-system]
 requires = ["setuptools>=61.0"]
 build-backend = "setuptools.build_meta"
@@ -57,7 +49,6 @@ select = [
    "T20", # flake8-print
    "W",  # pycodestyle warning
 ]
-ignore= ["PLR2004"]

 [tool.ruff.lint.per-file-ignores]
 "tests/*" = [
@@ -1 +0,0 @@
-"""Tests for the summary service."""
@@ -1 +0,0 @@
-"""Tests for the API summary service."""
@@ -1,21 +0,0 @@
-"""Integration tests for the health check endpoints."""
-
-
-class TestHeartbeat:
-    """Tests for the /__heartbeat__ endpoint."""
-
-    def test_returns_200(self, client):
-        """The heartbeat endpoint responds with 200 OK without a token."""
-        response = client.get("/__heartbeat__")
-
-        assert response.status_code == 200
-
-
-class TestLBHeartbeat:
-    """Tests for the /__lbheartbeat__ endpoint."""
-
-    def test_returns_200(self, client):
-        """The load-balancer heartbeat endpoint responds with 200 OK without a token."""
-        response = client.get("/__lbheartbeat__")
-
-        assert response.status_code == 200
@@ -1,88 +0,0 @@
-"""Integration tests for the API tasks endpoints."""
-
-# tests/unit/test_api_tasks.py
-from unittest.mock import MagicMock, patch
-
-
-class TestTasks:
-    """Tests for the /tasks endpoint."""
-
-    @patch(
-        "summary.api.route.tasks.process_audio_transcribe_summarize_v2.apply_async",
-        return_value=MagicMock(id="task-id-abc"),
-    )
-    @patch("summary.api.route.tasks.time.time", return_value=1735725600.0)
-    def test_create_task_returns_task_id(self, mock_time, mock_apply_async, client):
-        """POST /tasks/ with valid payload returns id and dispatches Celery task."""
-        response = client.post(
-            "api/v1/tasks/",
-            headers={"Authorization": "Bearer test-api-token"},
-            json={
-                "owner_id": "owner-123",
-                "filename": "recording.mp4",
-                "email": "user@example.com",
-                "sub": "sub-123",
-                "room": "room-abc",
-                "recording_date": "2026-01-01",
-                "recording_time": "10:00:00",
-                "language": None,
-                "download_link": "http://example.com/file.mp4",
-            },
-        )
-
-        assert response.status_code == 200
-        assert response.json() == {"id": "task-id-abc", "message": "Task created"}
-
-        args = mock_apply_async.call_args.kwargs["args"]
-        assert args == [
-            "owner-123",  # owner_id
-            "recording.mp4",  # filename
-            "user@example.com",  # email
-            "sub-123",  # sub
-            1735725600.0,  # frozen time
-            "room-abc",  # room
-            "2026-01-01",  # recording_date
-            "10:00:00",  # recording_time
-            None,  # language
-            "http://example.com/file.mp4",  # download_link
-            None,  # context_language
-        ]
-
-    def test_create_task_invalid_language(self, client):
-        """POST /tasks/ with an unsupported language returns 422."""
-        payload = {"language": "klingon"}
-        response = client.post(
-            "/api/v1/tasks/",
-            headers={"Authorization": "Bearer test-api-token"},
-            json=payload,
-        )
-
-        assert response.status_code == 422
-
-    @patch(
-        "summary.api.route.tasks.AsyncResult",
-        return_value=MagicMock(status="PENDING"),
-    )
-    def test_get_task_status_pending(self, mock_result, client):
-        """GET /tasks/{id} returns PENDING status when the task has not started yet."""
-        response = client.get(
-            "/api/v1/tasks/task-id-abc",
-            headers={"Authorization": "Bearer test-api-token"},
-        )
-
-        assert response.status_code == 200
-        assert response.json() == {"id": "task-id-abc", "status": "PENDING"}
-
-    @patch(
-        "summary.api.route.tasks.AsyncResult",
-        return_value=MagicMock(status="SUCCESS"),
-    )
-    def test_get_task_status_success(self, mock_result, client):
-        """GET /tasks/{id} returns SUCCESS status when the task has completed."""
-        response = client.get(
-            "/api/v1/tasks/task-id-abc",
-            headers={"Authorization": "Bearer test-api-token"},
-        )
-
-        assert response.status_code == 200
-        assert response.json()["status"] == "SUCCESS"
@@ -1,24 +0,0 @@
-"""Integration test configuration. Provides shared fixtures."""
-
-import pytest
-from fastapi.testclient import TestClient
-from pydantic import SecretStr
-
-from summary.core.config import Settings, get_settings
-from summary.main import app
-
-
-def get_settings_override():
-    """Return settings for tests."""
-    return Settings(
-        app_api_token=SecretStr("test-api-token"),
-    )
-
-
-@pytest.fixture()
-def client():
-    """Provide a FastAPI TestClient for tests."""
-    client = TestClient(app)
-    app.dependency_overrides[get_settings] = get_settings_override
-
-    return client