AUTH_ENABLED: true
STREAM_BASE: /stream-ho
1) POST /api/token/stream-ho (client_id, secret_key, session_id)
2) Buka viewer: /stream-ho/nvr1/101?client_id=...&session_id=...&token=...
WS: /api/stream-ho/:alias/:channel?client_id=&session_id=&token=
Bypass list: x360/*, nvr2/*