The Origin: Beyond Spreadsheets
For months, a weekly music listening club among friends operated entirely through a shared Google Spreadsheet. Every week, one participant recommended an album, everyone listened and submitted ratings (0–10) with written verdicts, and a historical leaderboard tracked rankings, averages, and group taste.
As the club grew past dozens of rounds, the manual workflow began showing friction:
- Tracking Spotify links, high-resolution artwork, and album release years required tedious manual copy-pasting.
- Input validation and rating deadlines were difficult to enforce cleanly on shared cells.
- Viewing album history and reading long-form reviews on mobile devices was cumbersome.
Rather than adopting a generic social platform, the decision was to build a purpose-made application designed strictly around the group's established rituals.
Product Architecture & Workflow
ODM Musical automates the administrative overhead while keeping the conversational spirit of the club intact:
- Automated Spotify Enrichment: When a recommender pastes a Spotify album link, the backend fetches canonical metadata, artist details, release year, and high-resolution cover artwork automatically.
- Weekly Round Lifecycle: Automated state transitions from Open (accepting submissions and reviews) to Closed (revealing final averages, distribution charts, and archive statistics).
- Mobile-First PWA: Built with web app manifest and service workers, allowing members to install the platform directly to their mobile home screens with near-instant load times.
Engineering & Design Decisions
1. Server-Rendered Simplicity with FastAPI & SQLite
Opted for server-side HTML rendering with Jinja2 rather than a decoupled SPA framework. This eliminated complex client state synchronization, ensured rapid first-contentful paint on mobile networks, and kept SQLite operations completely transactional and predictable.
2. Frictionless Onboarding & Unified Identity
Participants can log in using a simple 6-digit passcode or via OpenID Connect (Authentik SSO). Existing passcode accounts can seamlessly link to OIDC identities via verified email matching, ensuring no friction for casual group members while supporting modern SSO security.
3. Homelab Security & Zero Public Ports
Deployed inside a private Docker network behind a Cloudflare Tunnel ingress. No host ports are exposed to the public internet; traffic is routed through encrypted tunnels with automated HTTPS, HTTPOnly cookie protection, and HMAC-signed sessions.