O11 Pro is a streaming media server capable of proxying, remuxing, and redistributing IPTV/OTT live and VOD streams. It features a built-in web UI, EPG support, HLS/DASH handling, and DRM decryption via CDM integration.

Quick Start

# Minimum: just set a port
./o11pro_unpacked -p 8080

# With web UI login credentials
./o11pro_unpacked -p 8080 -user admin -password yourpassword

# Headless mode (no web UI)
./o11pro_unpacked -p 8080 -headless

# With separate EPG and streaming ports
./o11pro_unpacked -p 8080 -epgport 8081 -streamport 8082

# Debug mode
./o11pro_unpacked -p 8080 -v 3 -stdout

When started without -user and -password, a temporary admin account is auto-generated and printed to the log:

WARN: Use temporary account to login to Web UI: admin / OtoN4Fx0

Open http://<your-ip>:<port> in a browser to access the web interface.

Command-Line Options

Server & Network

Flag	Description	Default
`-p`	HTTP port to listen on (required)	`0` (none - must be set)
`-b`	HTTP bind address	`0.0.0.0` (all interfaces)
`-https`	Enable HTTPS (requires `server.crt` and `server.key` in the O11 directory)	`false`
`-baseurl`	HTTP base URL (for reverse proxy setups)	(empty)
`-streamport`	Dedicated streaming port. If not set, the HTTP port is used	`0` (shares HTTP port)
`-streambind`	Streaming bind address	`0.0.0.0`
`-epgport`	EPG (Electronic Program Guide) port	`0` (disabled)
`-epgbind`	EPG bind address	`0.0.0.0`
`-allow`	Comma-separated list of no-auth admin source IP addresses (e.g. `192.168.1.0/24,10.0.0.1`)	(empty)

Authentication & Security

Flag	Description	Default
`-user`	Static admin username for web UI login	(empty - temp account generated)
`-password`	Static admin password for web UI login	(empty - temp account generated)
`-jwtsecret`	JWT secret for login sessions. Default is randomly generated on each start	(random)

Configuration & Files

Flag	Description	Default
`-c`	Main config file path	`o11.cfg`
`-job`	Jobs config file path	`o11-job.cfg`
`-rec`	Recordings config file path	`o11-rec.cfg`
`-path`	Working directory. All sub-directories (HLS, logs, etc.) are created here	current directory
`-providers`	Providers directory path	`providers/`
`-keys`	File with KID:KEY pairs for decryption fallback	`keys.txt`
`-f`	FFmpeg binary path	`ffmpeg`
`-tsplay`	Tsplay binary path (for UDP output mode)	`tsplay`

Logging

Flag	Description	Default
`-v`	Log level: `0`=error, `1`=warning, `2`=info, `3`=debug, `4`=verbose, `5`=trace	`2` (info)
`-stdout`	Log to stdout instead of log files	`false`
`-logsize`	Max log file size in MB (per file)	`100`
`-logscount`	Number of log file rotations to keep	`7`
`-logtomain`	Also send stream-specific logs to the main log	`false`
`-logtomainonly`	Only send stream logs to main log (no separate stream logs)	`false`
`-V`	Module to enable special debug logs from (e.g. `subtitles`)	(empty)

Runtime Behavior

Flag	Description	Default
`-headless`	Run without the web UI	`false`
`-noautostart`	Do not auto-start providers/channels on launch	`false`
`-flushperiod`	Seconds between config/key flushes to disk. `0` to disable	`300`
`-keep`	Keep temp media files after processing (debugging)	`true`
`-noramfs`	Allow FFmpeg mode even if `./hls/live` is not a RAMFS	`false`
`-remuxondisk`	Write internal remuxer temporary files to disk instead of RAM	`false`
`-debugspeed`	Print current fragment download queue per channel/media type	`false`
`-defaultprovid`	Default provider ID to display when none specified	(empty)

Playlist & Stream Naming

Flag	Description	Default
`-plstreamname`	Format for stream names in playlists. `%p` = provider name, `%s` = stream name	`[%p] %s`
`-alteventdateformat`	Use alternate date format `02 Jan. 2006 15:04` for EPG events	`false`
`-novodmetadata`	Disable metadata for VOD tracks	`false`
`-pipeoutputcmd`	Pipe output command format (overridable per provider). `%s` = format placeholder	`tsplay -stdin %s`

Replay Mode

Flag	Description	Default
`-replay`	Local stream path to replay (from `hls/live/`)	(empty)
`-replaymode`	Replay mode: `ffmpeg`, `internalremuxer`, etc.	`internalremuxer`

User-Agent & HTTP Headers

Flag	Description	Default
`-a`	Default User-Agent for HTTP connections	Chrome 122 on macOS

VOD Downloader

These options are used when downloading and converting VOD (Video On Demand) streams:

Flag	Description	Default
`-manifest`	Download and convert this manifest URL to MP4, then exit	(empty)
`-video`	Video track index to grab	(empty - all)
`-audio`	Audio track indexes to grab (comma-separated)	(empty - all)
`-subs`	Subtitle indexes to grab (comma-separated or `all`)	(empty - none)
`-extrasubs`	Extra subtitle file URL. Can be used multiple times	(empty)
`-maxsegments`	Max segments to download (`0` = unlimited)	`0`
`-dashperiod`	Force DASH period index. `-1` = all non-ad periods	`-2`

DRM / CDM Decryption

Flag	Description	Default
`-usecdm`	Enable CDM script for DRM decryption	`false`
`-cdmtype`	CDM type: `widevine`, `playready`, or `verimatrix`	`widevine`
`-cdmmode`	CDM mode: `internal` or `external`	`internal`
`-script`	CDM script name	`auto`
`-cdmparams`	CDM script parameters	(empty)
`-key`	KID:KEY pair for decryption. Can be used multiple times	(empty)
`-doh`	DNS-over-HTTPS URL for CDM requests	(empty)
`-H`	Custom HTTP header for VOD requests (format: `key:value`). Can be used multiple times	(empty)

Examples

Basic IPTV Proxy

./o11pro_unpacked -p 8080 -user admin -password mysecretpass

Access the web UI at http://localhost:8080, log in with admin / mysecretpass, and add your providers through the interface.

Separate Streaming + EPG Ports

./o11pro_unpacked -p 8080 -streamport 9090 -epgport 9091 -user admin -password pass

Web UI: http://localhost:8080
Streaming: http://localhost:9090
EPG: http://localhost:9091

HTTPS Mode

# Place your certificates in the working directory first
cp server.crt server.key /path/to/o11/
./o11pro_unpacked -p 8443 -https -user admin -password pass

Access via https://localhost:8443.

VOD Download with DRM

# Download with manual decryption keys
./o11pro_unpacked -manifest "https://example.com/manifest.mpd" \
  -key "eb676abbcb345e96bbcf616630f1a3da:234567890abcdef1234567890abcdef1" \
  -video 0 -audio 0,1 -subs all

# Download with CDM script
./o11pro_unpacked -manifest "https://example.com/manifest.mpd" \
  -usecdm -cdmtype widevine -cdmmode internal

Headless with Custom Config

./o11pro_unpacked -p 8080 -headless -c /etc/o11/myconfig.cfg \
  -path /var/lib/o11 -providers /etc/o11/providers/

Bind to Localhost Only

./o11pro_unpacked -p 8080 -b 127.0.0.1 -streambind 127.0.0.1

Full Debug Mode

./o11pro_unpacked -p 8080 -v 5 -stdout -debugspeed

Replay a Local Stream

./o11pro_unpacked -p 8080 -replay my_channel_stream -replaymode internalremuxer

Directory Structure

When using -path, O11 creates the following sub-directories:

<path>/
├── hls/
│   └── live/          # Live HLS segments (recommend RAMFS)
├── logs/              # Rotating log files
├── providers/         # Provider configuration files
├── keys.txt           # KID:KEY decryption fallback
├── o11.cfg            # Main configuration
├── o11-job.cfg        # Jobs configuration
└── o11-rec.cfg        # Recordings configuration

Log Levels Reference

Level	Name	Description
`0`	Error	Critical errors only
`1`	Warning	Warnings and errors
`2`	Info	General operational info (default)
`3`	Debug	Detailed debug information
`4`	Verbose	Very detailed output
`5`	Trace	Maximum verbosity, including internal state

Notes

resources/ is a embedded content from the unpacked binary
The -p flag is required. The binary will not start without an HTTP port.
Without -user / -password, a temporary admin account is generated on each start and printed to the log.
For HTTPS, both server.crt and server.key must exist in the O11 working directory.
The -key flag accepts KID:KEY pairs in hex format and can be specified multiple times for multiple keys.
The -H flag for custom headers can be repeated: -H "Authorization:Bearer token" -H "X-Custom:value".
VOD downloader mode (-manifest) downloads, converts, and exits - it does not start the server.