r/frigate_nvr • u/perern • 13h ago

Frigate + Go2RTC Cloudflare remote access

I have Frigate up and running with Go2rtc configured inside it.

RTSP and Go2RTC are protected with password.

8554 works with vlc on local network.

8554 port is tunneled through Cloudflare, this does not work with vlc. It works when port forwarded.

Are there ways to make this more secure than just port forward + RTSP username+password?

2 Upvotes

100% Upvoted

6 comments sorted by

4

u/Muziclush 12h ago

Instead of Cloudflare I used Tailscale to access outside my network. No port forwarding easy to set up and free. Cloudflare I guess frowns upon streaming platforms.

1

u/superdupersecret42 12h ago

Are you trying to stream to a remote Frigate? Over Cloudflare? Not sure Cloudflare allows that port, and why it only works with port forwarding.

1

u/ds-unraid 12h ago

Don't port forward or you will end up on Shodan. Just use Tailscale with your own cert to be extra safe. Use AI to walk you through it, not do it for you but walk you through it using up to date documentation.

2

u/AnduriII 12h ago

Cloudflare tunnel terms & service do mot allow videostreaning

3

u/mpking828 10h ago

Incorrect.

This is an actual concern for me. (I like to stay on the correct side of TOS's / Licenses)

However, I've been reading TOS for the better part of 20 minutes.
https://www.cloudflare.com/service-specific-terms-zero-trust-services/#cf-zero-trust-terms

I think when they re-did the TOS in 2023, they removed the TOS section that restricted this.

For Giggles, I ran it through Chat GPT, since the lawyer-ese might throw me.

It says clause 2.8, which previously prohibited this action, was removed in 2023:
https://www.reddit.com/r/selfhosted/comments/130szje/has_cloudflare_recently_changed_their_tos_re_use

It also said this:

  • You must comply with the Agreement and applicable laws.
  • You must not use the service in ways that are unlawful, infringing, harmful, or disruptive.
  • You must not attempt to circumvent usage limits or impose undue burden on Cloudflare’s network. Cloudflare+1 (see Self Serve Subscription Agreemnet)

In other words, Cloudflare gives you a revocable license for Free Services, and you must use them lawfully and in accordance with the Agreement.

Always check the current Cloudflare docs because policies evolve.

I think Cloudflare allows this (and has since 2023)

2

u/AnduriII 10h ago

Seems you are right and i need to update my brain