nginx.conf 4.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152
  1. worker_processes 1;
  2. error_log /var/log/nginx/error.log warn;
  3. pid /var/run/nginx.pid;
  4. load_module "modules/ngx_rtmp_module.so";
  5. events {
  6. worker_connections 1024;
  7. }
  8. http {
  9. include /etc/nginx/mime.types;
  10. default_type application/octet-stream;
  11. log_format main '$remote_addr - $remote_user [$time_local] "$request" '
  12. '$status $body_bytes_sent "$http_referer" '
  13. '"$http_user_agent" "$http_x_forwarded_for"';
  14. access_log /var/log/nginx/access.log main;
  15. sendfile on;
  16. keepalive_timeout 65;
  17. gzip on;
  18. gzip_comp_level 6;
  19. gzip_types text/plain text/css application/json application/x-javascript application/javascript text/javascript image/svg+xml image/x-icon image/bmp image/png image/gif image/jpeg image/jpg;
  20. gzip_proxied no-cache no-store private expired auth;
  21. gzip_vary on;
  22. upstream frigate_api {
  23. server localhost:5001;
  24. keepalive 1024;
  25. }
  26. server {
  27. listen 5000;
  28. location /stream/ {
  29. add_header 'Cache-Control' 'no-cache';
  30. add_header 'Access-Control-Allow-Origin' "$http_origin" always;
  31. add_header 'Access-Control-Allow-Credentials' 'true';
  32. add_header 'Access-Control-Expose-Headers' 'Content-Length';
  33. if ($request_method = 'OPTIONS') {
  34. add_header 'Access-Control-Allow-Origin' "$http_origin";
  35. add_header 'Access-Control-Max-Age' 1728000;
  36. add_header 'Content-Type' 'text/plain charset=UTF-8';
  37. add_header 'Content-Length' 0;
  38. return 204;
  39. }
  40. types {
  41. application/dash+xml mpd;
  42. application/vnd.apple.mpegurl m3u8;
  43. video/mp2t ts;
  44. image/jpeg jpg;
  45. }
  46. root /tmp;
  47. }
  48. location /clips/ {
  49. add_header 'Access-Control-Allow-Origin' "$http_origin" always;
  50. add_header 'Access-Control-Allow-Credentials' 'true';
  51. add_header 'Access-Control-Expose-Headers' 'Content-Length';
  52. if ($request_method = 'OPTIONS') {
  53. add_header 'Access-Control-Allow-Origin' "$http_origin";
  54. add_header 'Access-Control-Max-Age' 1728000;
  55. add_header 'Content-Type' 'text/plain charset=UTF-8';
  56. add_header 'Content-Length' 0;
  57. return 204;
  58. }
  59. types {
  60. video/mp4 mp4;
  61. image/jpeg jpg;
  62. }
  63. autoindex on;
  64. root /media/frigate;
  65. }
  66. location /recordings/ {
  67. add_header 'Access-Control-Allow-Origin' "$http_origin" always;
  68. add_header 'Access-Control-Allow-Credentials' 'true';
  69. add_header 'Access-Control-Expose-Headers' 'Content-Length';
  70. if ($request_method = 'OPTIONS') {
  71. add_header 'Access-Control-Allow-Origin' "$http_origin";
  72. add_header 'Access-Control-Max-Age' 1728000;
  73. add_header 'Content-Type' 'text/plain charset=UTF-8';
  74. add_header 'Content-Length' 0;
  75. return 204;
  76. }
  77. types {
  78. video/mp4 mp4;
  79. }
  80. autoindex on;
  81. autoindex_format json;
  82. root /media/frigate;
  83. }
  84. location /api/ {
  85. add_header 'Access-Control-Allow-Origin' '*';
  86. add_header Cache-Control "no-store";
  87. proxy_pass http://frigate_api/;
  88. proxy_pass_request_headers on;
  89. proxy_set_header Host $host;
  90. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  91. proxy_set_header X-Forwarded-Proto $scheme;
  92. }
  93. location / {
  94. add_header Cache-Control "no-cache";
  95. location ~* \.(?:js|css|svg|ico|png)$ {
  96. access_log off;
  97. expires 1y;
  98. add_header Cache-Control "public";
  99. }
  100. sub_filter 'href="/' 'href="$http_x_ingress_path/';
  101. sub_filter 'url(/' 'url($http_x_ingress_path/';
  102. sub_filter '"/dist/' '"$http_x_ingress_path/dist/';
  103. sub_filter '"/js/' '"$http_x_ingress_path/js/';
  104. sub_filter '<body>' '<body><script>window.baseUrl="$http_x_ingress_path";</script>';
  105. sub_filter_types text/css application/javascript;
  106. sub_filter_once off;
  107. root /opt/frigate/web;
  108. try_files $uri $uri/ /index.html;
  109. }
  110. }
  111. }
  112. rtmp {
  113. server {
  114. listen 1935;
  115. chunk_size 4096;
  116. allow publish 127.0.0.1;
  117. deny publish all;
  118. allow play all;
  119. application live {
  120. live on;
  121. record off;
  122. meta copy;
  123. }
  124. }
  125. }