Consolidate listen statements

docker/main/rootfs/usr/local/nginx/conf/nginx.conf

@@ -59,9 +59,6 @@ http {
     include go2rtc_upstream.conf;
 
     server {
-        # intended for internal traffic, not protected by auth
-        listen 5000;
-
         include listen.conf;
 
         # vod settings

docker/main/rootfs/usr/local/nginx/templates/listen.gotmpl

@@ -5,6 +5,9 @@ listen 8971;
 # intended for external traffic, protected by auth
 listen 8971 ssl;
 
+# intended for internal traffic, not protected by auth
+listen 5000;
+
 ssl_certificate /etc/letsencrypt/live/frigate/fullchain.pem;
 ssl_certificate_key /etc/letsencrypt/live/frigate/privkey.pem;
 

docs/docs/configuration/advanced.md

@@ -118,25 +118,36 @@ services:
     volumes:
       ...
       - /path/to/your/nginx.conf:/usr/local/nginx/conf/nginx.conf
-
 ```
 
 ### Enabling IPv6
 
-IPv6 is disabled by default, to enable IPv6 nginx.conf needs to be bind mounted as described above with the IPv6 enabled. For example:
+IPv6 is disabled by default, to enable IPv6 listen.gotmpl needs to be bind mounted with IPv6 enabled. For example:
 
 ```
-server {
-  listen: 5000;
-}
+{{ if not .enabled }}
+# intended for external traffic, protected by auth
+listen 8971;
+{{ else }}
+# intended for external traffic, protected by auth
+listen 8971 ssl;
+
+# intended for internal traffic, not protected by auth
+listen 5000;
 ```
 
 becomes
 
 ```
-server {
+{{ if not .enabled }}
+# intended for external traffic, protected by auth
+listen [::]:8971 ipv6only=off;
+{{ else }}
+# intended for external traffic, protected by auth
+listen [::]:8971 ipv6only=off ssl;
+
+# intended for internal traffic, not protected by auth
 listen [::]:5000 ipv6only=off;
-}
 ```
 
 ## Custom Dependencies