# Documentation

Auritus is a generator plus player: the generator reads the DOM, the API keys work by content hash, and audio stays private until your site key requests a signed URL.

- [**Getting started**](/docs/getting-started) Interactive, animated setup guide with side-by-side identity choices, TTS model audio previews, and dynamic embed builder.

- [**Architecture**](/docs/architecture) Visual guide to the local-first worker, AWS fallback, identity choices, and secure-design status.

- [**Security**](/docs/security) Operator authentication, refresh-token rotation, unattended workers, revocation, and notification.

- [**Google Workspace SSO**](/docs/security/google-workspace) Step-by-step setup for Google OAuth 2.0 federation with Cognito, authorized redirect URIs, JavaScript origins, and Secrets Manager.

- [**Usage**](/docs/usage) Embed script, site keys, and how jobs flow from browser to audio.

- [**Ignore rules**](/docs/ignore-rules) Selectors and data attributes that shape what gets narrated.

- [**Theming**](/docs/theming) CSS variables and data attributes so the player matches your page.

- [**Self-hosting**](/docs/self-hosting) Deploy the CDK stack, Cognito login, local worker, and guardrails.