From d95eb6f4ab6f863c2ad397b5f85d6d1bafcff48a Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Sun, 29 Jun 2025 01:30:51 +0200
Subject: [PATCH] Configure frigate webrtc

---
 apps/frigate/kustomization.yaml |  1 +
 apps/frigate/release.yaml       | 11 +++++++++++
 apps/frigate/secret.yaml        |  5 +++++
 apps/frigate/webrtc-svc.yaml    | 20 ++++++++++++++++++++
 4 files changed, 37 insertions(+)
 create mode 100644 apps/frigate/webrtc-svc.yaml

diff --git a/apps/frigate/kustomization.yaml b/apps/frigate/kustomization.yaml
index 1b71f03..6643013 100644
--- a/apps/frigate/kustomization.yaml
+++ b/apps/frigate/kustomization.yaml
@@ -4,3 +4,4 @@ resources:
   - namespace.yaml
   - secret.yaml
   - release.yaml
+  - webrtc-svc.yaml
diff --git a/apps/frigate/release.yaml b/apps/frigate/release.yaml
index db5d1ca..f34145c 100644
--- a/apps/frigate/release.yaml
+++ b/apps/frigate/release.yaml
@@ -60,6 +60,16 @@ spec:
                   - audio
                   - detect
                   - record
+
+      go2rtc:
+        streams:
+          dom:
+            - rtsp://{FRIGATE_RTSP_DOM_USER}:{FRIGATE_RTSP_DOM_PASSWORD_URLENCODED}@192.168.3.10:554/Streaming/Channels/101
+          garaz:
+            - rtsp://{FRIGATE_RTSP_GARAZ_USER}:{FRIGATE_RTSP_GARAZ_PASSWORD_URLENCODED}@192.168.3.11:554/Streaming/Channels/101
+        webrtc:
+          candidates:
+            - frigate-rtc.lumpiasty.xyz:8555
     persistence:
       media:
         enabled: true
@@ -78,6 +88,7 @@ spec:
       enabled: true
       annotations:
         cert-manager.io/cluster-issuer: letsencrypt
+        nginx.org/websocket-services: frigate
       hosts:
         - host: frigate.lumpiasty.xyz
           paths:
diff --git a/apps/frigate/secret.yaml b/apps/frigate/secret.yaml
index b96d39d..7e7563e 100644
--- a/apps/frigate/secret.yaml
+++ b/apps/frigate/secret.yaml
@@ -34,5 +34,10 @@ spec:
     type: Opaque
     transformation:
       excludeRaw: true
+      templates:
+        FRIGATE_RTSP_DOM_PASSWORD_URLENCODED:
+          text: '{{ urlquery (get .Secrets "FRIGATE_RTSP_DOM_PASSWORD") }}'
+        FRIGATE_RTSP_GARAZ_PASSWORD_URLENCODED:
+          text: '{{ urlquery (get .Secrets "FRIGATE_RTSP_GARAZ_PASSWORD") }}'
 
   vaultAuthRef: camera
diff --git a/apps/frigate/webrtc-svc.yaml b/apps/frigate/webrtc-svc.yaml
new file mode 100644
index 0000000..cddee76
--- /dev/null
+++ b/apps/frigate/webrtc-svc.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: go2rtc
+  namespace: frigate
+spec:
+  type: LoadBalancer
+  selector:
+    app.kubernetes.io/instance: frigate
+    app.kubernetes.io/name: frigate
+  ipFamilyPolicy: RequireDualStack
+  ports:
+    - name: webrtc-tcp
+      protocol: TCP
+      port: 8555
+      targetPort: webrtc-tcp
+    - name: webrtc-udp
+      protocol: UDP
+      port: 8555
+      targetPort: webrtc-udp