mirror of https://github.com/blakeblackshear/frigate.git synced 2026-08-05 18:38:54 +03:00

Files

T

Josh Hawkins 3b87df2485 Pin the internal auth port to the value nginx bound at startup

/auth grants anonymous admin to any request whose X-Server-Port matches networking.listen.internal, but it read that port off the live config while nginx binds its listeners once at container start and never reloads them, so any path that swaps the running config could move the trusted port without nginx moving with it. Saving networking.listen.internal equal to the external port applied immediately despite the restart-required warning, which handed unauthenticated admin to everything reaching the external port. Snapshot the port at app creation and compare against that instead, and reject a config whose two listeners share a port number, which nginx would refuse to start with anyway.

2026-08-04 19:23:12 -05:00

data

remove all references to degirum in frigate (#23882 )

2026-08-01 08:00:36 -06:00

docs

Pin the internal auth port to the value nginx bound at startup

2026-08-04 19:23:12 -05:00

plugins

Miscellaneous fixes (#23648 )

2026-07-07 10:56:43 -06:00

scripts

Merge detector and model in settings UI (#23216 )