From 6e2ef58065aa947966550a12d577bbd5694a0f36 Mon Sep 17 00:00:00 2001
From: Ilya Rakhlin <i.rakhlin@gmail.com>
Date: Sat, 14 Aug 2021 16:50:54 -0400
Subject: [PATCH] Pull in missed nginx update

---
 docker/rootfs/usr/local/nginx/conf/nginx.conf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docker/rootfs/usr/local/nginx/conf/nginx.conf b/docker/rootfs/usr/local/nginx/conf/nginx.conf
index e63a1c1b5..4820667c8 100644
--- a/docker/rootfs/usr/local/nginx/conf/nginx.conf
+++ b/docker/rootfs/usr/local/nginx/conf/nginx.conf
@@ -71,6 +71,9 @@ http {
         location /vod/ {
             vod hls;
 
+            secure_token $args;
+            secure_token_types application/vnd.apple.mpegurl;
+
             add_header Access-Control-Allow-Headers '*';
             add_header Access-Control-Expose-Headers 'Server,range,Content-Length,Content-Range';
             add_header Access-Control-Allow-Methods 'GET, HEAD, OPTIONS';
@@ -122,6 +125,11 @@ http {
             root /media/frigate;
         }
 
+        location /cache/ {
+                internal; # This tells nginx it's not accessible from the outside
+                alias /tmp/cache/;
+        }
+
         location /recordings/ {
             add_header 'Access-Control-Allow-Origin' "$http_origin" always;
             add_header 'Access-Control-Allow-Credentials' 'true';