NVR with object detection. ghcr.io/blakeblackshear/frigate:stable, privileged container in a privileged LXC.
|
|
| Guest |
LXC 115 "Frigate" on SuperPC |
| IP |
192.168.86.212 |
| Tailscale |
frigate / 100.79.148.32 |
| Resources |
4 vCPU / 8 GB |
| Rootfs |
40G local-lvm (non-Ceph!) |
| Media |
mp0 /mnt/pve/cephfs/frigate → /mnt/frigate-storage |
| Port |
Purpose |
| 8971 |
authenticated UI (TLS, self-signed) — NPM points frigate.codycodez.com here |
| 5000 |
unauthenticated API/UI — exposed 2026-07-12 for the Home Assistant integration (LAN only) |
| 8554 |
go2rtc RTSP restream |
| 8555 tcp/udp |
WebRTC |
| 1984 |
go2rtc API |
graph LR
C1[Camera .30 'test'<br/>TP-Link RTSP] --> F[Frigate<br/>CPU detector]
C2[Camera .31 '2K C211'<br/>RTSP+ONVIF :2020] --> F
F -->|user frigate| M[MQTT .2:1883]
F --> S[(cephfs/frigate<br/>recordings/clips/snapshots)]
HA[Home Assistant] -.subscribes.- M
- MQTT: enabled → 192.168.86.2:1883 as user
frigate (verified — not an assumption)
- Detector: CPU (
cpu1) — no Coral/GPU accel; hwaccel_args: []
- Recording: motion 21 days, continuous 0 days; snapshots 30 days
- Objects: person, package, car, truck, motorcycle, bicycle, dog, cat
- Cameras authenticate with the shared standard credentials (see findings #6)
- Config
/opt/frigate/config/config.yml + SQLite DB — on non-Ceph local-lvm and not in vzdump → single-NVMe risk, findings #5
- Recordings on cephfs (protected by Ceph replication only)
cd /opt/frigate && docker compose pull && docker compose up -d && docker image prune -f
- OpenVINO/GPU detector (9900X iGPU) instead of CPU as cameras scale
- VLAN for cameras; per-camera credentials
- Apartment Cameras project will add cameras — config pattern is ready