- Native nginx with ACME wildcard cert (*.nordhammer.it) via Cloudflare DNS-01 - Native Authelia SSO with forward auth protecting homepage + camera - Native go2rtc camera streaming (no more Docker) - Auto-migration script for Authelia secrets and user database from Docker - Homepage hrefs updated to use HTTPS domain names - Fail2ban updated for native nginx log paths + new Authelia jail Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
18 lines
548 B
Nix
18 lines
548 B
Nix
# services/go2rtc.nix — Native go2rtc camera streaming
|
|
{ config, lib, ... }:
|
|
{
|
|
config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
|
|
|
|
services.go2rtc = {
|
|
enable = true;
|
|
settings = {
|
|
# NOTE: RTSP credentials end up in the nix store — same exposure as
|
|
# the old Docker bind-mount config. Acceptable for a local LAN camera.
|
|
streams.kids_bedroom = "rtsp://fredrik:12345678@192.168.4.39:554/stream1";
|
|
api.listen = ":1984";
|
|
webrtc.listen = ":8555";
|
|
};
|
|
};
|
|
|
|
};
|
|
}
|