[HowTo] Install as PWA (App) despite Unsecure Connection (in docker setup: ERR_CERT_AUTHORITY_INVALID)

[drewsed]

Describe the problem you are having

Hi, I tried to install frigate as a PWA and read online, that this requires a secure connection. Mine doesnt seem to be secure.
I get the error ERR_CERT_AUTHORITY_INVALID in Chrome Browser on Android and Firefox on Win11. On the PC I saw that the certificate hostname is localhost, I connect wit an IP from a different machine.

How do I properly set this up? Can somebody help me?

Thank you very much in advance.

Version

0.14

What browser(s) are you using?

Brave / Firefox latest stable

Frigate config file

default config after setup

Relevant Frigate log output

none

Relevant go2rtc log output

none

FFprobe output from your camera

none

Frigate stats

No response

Install method

Docker Compose

docker-compose file or Docker CLI command

version: "3.9"
services:
  frigate:
    container_name: frigate
    privileged: true # this may not be necessary for all setups
    restart: unless-stopped
    image: ghcr.io/blakeblackshear/frigate:stable

    shm_size: "220.62mb" # update for your cameras based on calculation above
    devices:
      - /dev/bus/usb:/dev/bus/usb # Passes the USB Coral, needs to be modified for other versions
      # - /dev/apex_0:/dev/apex_0 # Passes a PCIe Coral, follow driver instructions here https://coral.ai/docs/m2/get-started/#2a-on-linux
      # - /dev/video11:/dev/video11 # For Raspberry Pi 4B
      - /dev/dri/renderD128:/dev/dri/renderD128 # For intel hwaccel, needs to be updated for your hardware
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /home/andi/docker_data/frigate/config:/config
      #- /home/andi/docker_data/frigate/media/frigate:/media/frigate
      - /media/Data/docker_data/frigate/media/frigate/:/media/frigate
      #- type: tmpfs # Optional: 1GB of memory, reduces SSD/SD Card wear
      #  target: /tmp/cache
      #  tmpfs:
      #    size: 1000000000
    ports:
      - "8971:8971"
      - "5000:5000" # Internal unauthenticated access. Expose carefully.
      - "8554:8554" # RTSP feeds
      - "8555:8555/tcp" # WebRTC over tcp
      - "8555:8555/udp" # WebRTC over udp
    environment:
      FRIGATE_RTSP_PASSWORD: "xxxxx"
      # LIBVA_DRIVER_NAME: "i965" # old HW Driver hat nicht funktioniert, paar mal probiert, die HW kann einfach nur bis 2048

Object Detector

Coral

Network connection

Wired

Camera make and model

none

Screenshots of the Frigate UI's System metrics pages

No response

Any other information that may be helpful

No response

[NickM-27]

Typically you need to use a reverse proxy or something like tailscale or cloudflare tunnels

[drewsed]

Thank you very much. I will dig into.

[drewsed]

Hi, unfortunately I haven't really made any progress here.

Can you help me with the basic questions?

I only connect locally to my frigate instance. remotely I use a vpn connection.
I have now installed traefik, gone through the quick start guide and updated the frigate compose file.

treafik recognizes the service

How can I connect now? Via the specified URL?
TLS is not configured in the traefik dashboard. I thought traefik comes with official certificates. Am I on the right track here? if so, how do I proceed?

Where do I get certificates from, self signed does not work and I could also store them directly with frigate.

Many thanks in advance.

[drewsed]

Ok, I have found a simpler solution to my problem. I was wondering why you can install openhab (a smart home server) as a PWA. I came across the following hint: You can specify trusted hosts/urls in Chrome and then I can also install frigate as a PWA.

https://community.openhab.org/t/progressive-web-app-interface/106308/11

Strangely enough, it also works with openhab without such an exception. But I am now pleased that it works.