Adding a note about TLS

This commit is contained in:
Emil Sandnabba 2024-08-14 22:04:08 +02:00
parent 35142a201c
commit 21e65cff1e

View File

@ -14,6 +14,13 @@ Before setting up a reverse proxy, check if any of the built-in functionality in
|Authentication|Please see the [authentication](../configuration/authentication.md) documentation| |Authentication|Please see the [authentication](../configuration/authentication.md) documentation|
|IPv6|[Advanced configuration #enabling-ipv6](../configuration/advanced.md#enabling-ipv6) |IPv6|[Advanced configuration #enabling-ipv6](../configuration/advanced.md#enabling-ipv6)
**Note about TLS**
When using a reverse proxy, the TLS session is usually terminated at the proxy, sending the internal request over plain HTTP. If this is the desired behavior, TLS must first be disabled in Frigate, or you will encounter an HTTP 400 error: "The plain HTTP request was sent to HTTPS port."
To disable TLS, set the following in your Frigate configuration:
```yml
tls:
enabled: false
```
:::warning :::warning
A reverse proxy can be used to secure access to an internal web server, but the user will be entirely reliant on the steps they have taken. You must ensure you are following security best practices. A reverse proxy can be used to secure access to an internal web server, but the user will be entirely reliant on the steps they have taken. You must ensure you are following security best practices.
@ -21,6 +28,8 @@ This page does not attempt to outline the specific steps needed to secure your i
Please use your own knowledge to assess and vet the reverse proxy software before you install anything on your system. Please use your own knowledge to assess and vet the reverse proxy software before you install anything on your system.
::: :::
## Proxies
There are many solutions available to implement reverse proxies and the community is invited to help out documenting others through a contribution to this page. There are many solutions available to implement reverse proxies and the community is invited to help out documenting others through a contribution to this page.
* [Apache2](#apache2-reverse-proxy) * [Apache2](#apache2-reverse-proxy)