Staff Portal Setup
Connect Discord OAuth, staff roles, moderation permissions, and the private web console.
Discord application
Use the same Discord application/bot as Signal 12 or another trusted bot. Add your website callback URL under OAuth2 Redirects, then place the application ID, client secret, bot token, guild ID, and redirect URL in the private .env file.
Role access tiers
Configure Staff, Moderator, Administrator, and Management role IDs in .env. Access is re-checked against the live Discord member before the staff console loads, so removing a Discord staff role removes web moderation access.
Bot permissions
Give the bot only the Discord permissions required for the actions you enable. Place the bot role above members/roles it is expected to moderate. Management role changes are additionally restricted to DISCORD_MANAGEABLE_ROLE_IDS.
Audit trail
Web moderation actions are appended to logs/moderation.jsonl. Optionally set DISCORD_MOD_LOG_CHANNEL_ID to mirror each website moderation action into a private Discord log channel.