Cameras

Cameras (go2rtc)

Live security-camera streams from RTSP / WebRTC / MJPEG sources, displayed on the dashboard or the dedicated /cameras page. The bundled stack includes go2rtc as a streaming bridge.

What it does

• Render WebRTC streams (low latency, ~200ms) directly in the browser via <video> + RTCPeerConnection
• Bridge RTSP streams (typical IP camera output) → WebRTC via go2rtc
• Render MJPEG streams (legacy IP cameras) as <img>
• Show snapshot thumbnails (HTTP image URL) when WebRTC isn't established yet
• Digest + Basic auth for cameras that need credentials

What it does not

• Doesn't record. go2rtc supports RTSP recording but Kinboard doesn't expose it.
• Doesn't do PTZ control. Plain stream display only.
• Doesn't substitute for a proper NVR. Use Frigate / Scrypted / BlueIris if you need motion detection / object detection / longer retention.

Setup

1. Configure cameras in /settings/cameras

Open Settings → Cameras → + Camera. For each camera:

• Name — friendly label
• Stream type — rtsp, webrtc, or mjpeg
• Stream URL — varies by type (see below)
• Snapshot URL (optional) — HTTP image URL for thumbnail
• Authentication (optional) — Digest (Hikvision, Amcrest) or Basic, with username/password

TODO: screenshot of the add-camera dialog

Stream URL formats

RTSP (most IP cameras)

rtsp://user:pass@192.168.1.100:554/stream1

go2rtc transcodes this to WebRTC for browser display. The streaming bridge uses the credentials from the URL.

For Hikvision cameras the path is usually /Streaming/Channels/101 (main) or /Streaming/Channels/102 (sub). Use the sub-stream for tile thumbnails to save bandwidth.

For Amcrest/Dahua: /cam/realmonitor?channel=1&subtype=0.

WebRTC (go2rtc native)

http://192.168.1.100:8080/webrtc?src=mycamera

Used when your go2rtc instance is already configured with named camera entries (in webapp/docker/go2rtc.yaml). Stream URL points at the go2rtc API.

The shipped go2rtc.yaml has placeholder entries you customize for your hardware:

streams:
  hikvision:
    - rtsp://${CAMERA_USER}:${CAMERA_PASS}@${HIKVISION_HOST}:554/Streaming/Channels/101
  amcrest_hd:
    - rtsp://${CAMERA_USER}:${CAMERA_PASS}@${AMCREST_HOST}/cam/realmonitor?channel=1&subtype=0

Set CAMERA_USER, CAMERA_PASS, HIKVISION_HOST, AMCREST_HOST in webapp/docker/.env.

MJPEG (legacy)

http://192.168.1.100/mjpeg

Direct HTTP image stream. Highest bandwidth. Use as fallback for cameras whose RTSP is broken.

Authentication

If your camera requires HTTP auth on the snapshot URL or the stream:

• Digest — most modern IP cameras (Hikvision, Amcrest, Dahua). Kinboard's /api/cameras proxy handles digest negotiation.
• Basic — older cameras. Less secure but sometimes only option.

Credentials are stored in settings.cameras[].auth and only used server-side; the proxy strips them before serving the image to the browser.

WebRTC + Traefik

If you put go2rtc behind Traefik for public access, the override file docker-compose.traefik.yml.example ships a TCP router for port 8555 (WebRTC TCP fallback). Configure a webrtc entrypoint in your Traefik static config:

# traefik.yml
entryPoints:
  webrtc:
    address: ":8555"

For UDP WebRTC (lower latency, the preferred path), the go2rtc container exposes UDP 8555 directly — no Traefik involvement. Make sure your firewall lets it through.

Set WEBRTC_LAN_IP and WEBRTC_PUBLIC_HOST in .env so go2rtc announces correct ICE candidates to clients on the LAN vs WAN.

Performance

go2rtc transcodes RTSP → WebRTC on the fly. For most setups it's lightweight (no re-encoding), but if your camera streams H.265 and your browser needs H.264, go2rtc will re-encode in software → CPU-intensive. To force a hardware encoder:

• Mount the GPU device into the go2rtc container (the docker-compose.override.yml example does this for Intel iGPU on /dev/dri/renderD128)
• Configure go2rtc to use the hardware codec

Troubleshooting

Symptom	Likely cause
Black tile, snapshot works	WebRTC ICE failure. Check WEBRTC_LAN_IP matches your LAN IP, and UDP 8555 isn't blocked by firewall.
Stream lags by 5-15 seconds	Probably transcoding bottleneck — check go2rtc CPU. Try the sub-stream (lower resolution) or attach a hardware encoder.
Auth dialog pops in browser	Stream URL credentials weren't recognized; check digest vs basic. The /api/cameras proxy should handle both — verify auth.type matches your camera.
Multiple cameras lock up after a few hours	Some cameras only allow one RTSP session. Use go2rtc named streams (config in go2rtc.yaml) so go2rtc dedupes the underlying connection.

Related

• Self-hosting — Traefik override + WebRTC port handling
• See webapp/docker/go2rtc.yaml for the streaming bridge config
• See webapp/src/components/camera-viewer.tsx for the player implementation