rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

frigate: map Remote-Role header for admin access via Authelia

Browse source 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
rope 2026-05-22 22:03:34 +01:00
parent 4a5a30f018
commit 818caf88a2
1 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
services/frigate.nix
View file

@ -13,7 +13,10 @@
settings = {
mqtt.enabled = false;
proxy.header_map.user = "Remote-User";
proxy.header_map = {
user = "Remote-User";
role = "Remote-Role";
};
cameras.kids_bedroom = {
enabled = true;
@ -62,6 +65,10 @@
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header X-Forwarded-Uri $request_uri;
proxy_set_header X-Forwarded-For $remote_addr;
# Inject admin role into auth response so Frigate's
# auth_request_set $role $upstream_http_remote_role picks it up
add_header Remote-Role admin;
'';
};