frigate: package does not expose port 8971 for reverse proxy

[rajil]

Nixpkgs version

• Unstable (25.11)

Describe the bug

Hello,

I installed frigate and setup a camera. The webui is available at http://localhost:5000. however i dont see the service being exposed on port 8971 for authenticated users as mentioned in the documentation.

Steps to reproduce

Here is my config,

     services.frigate = {    
        enable = true;    
        hostname = "frigate.domain.com";    
        settings = {    
          mqtt.enabled = false;    
          cameras."test1" = {    
            ffmpeg.inputs = [ {    
              path = "rtsp://127.0.0.1:8554/test1";    
              input_args = "preset-rtsp-restream";    
              roles = [ "record" ];    
            } ];    
          };    
        };    
        };    
    
    services.go2rtc = {    
    enable = true;    
    settings = {    
      streams = {    
        "test1" = [    
          "rtsp://admin:pwd@192.168.1.2:554/h264Preview_01_main"    
        ];    
      };    
      rtsp.listen = ":8554";    
      webrtc.listen = ":8555";    
    };    
  };   

Expected behaviour

Frigate listening on port 8971

Screenshots

No response

Relevant log output

Additional context

No response

System metadata

• system: "x86_64-linux"
• host os: Linux 6.12.55, NixOS, 25.11 (Xantusia), 25.11.20251028.08dacfc
• multi-user?: yes
• sandbox: yes
• version: nix-env (Nix) 2.31.2
• nixpkgs: `/nix/store/p6gvrb36n5dh0cdg6d77rkpapy5kc0gq-source

Notify maintainers

@mweinelt

Note for maintainers: Please tag this issue in your pull request description. (i.e. Resolves #ISSUE.)

I assert that this issue is relevant for Nixpkgs

• I assert that this is a bug and not a support request.
• I assert that this is not a duplicate of an existing issue.
• I assert that I have read the NixOS Code of Conduct and agree to abide by it.

Is this issue important to you?

Add a 👍 reaction to issues you find important.

[mweinelt]

We expose the webui for authenticated users behind nginx on port 443. Is that insufficient?

8971 is the port that the upstream Docker container exposes to the reverse proxy. I think that is 127.0.0.1:5001 for us.

      upstreams = {
        frigate-api.servers = {
          "127.0.0.1:5001" = { };
        };
        frigate-mqtt-ws.servers = {
          "127.0.0.1:5002" = { };
        };
        frigate-jsmpeg.servers = {
          "127.0.0.1:8082" = { };
        };
        frigate-go2rtc.servers = {
          "127.0.0.1:1984" = { };
        };
      };

[rajil]

@mweinelt Thanks for the reply.