Issue #4: Some Mosquitto mqtt configuration for Frigate.

README.md

@@ -44,6 +44,8 @@ The Frigate `docker-compose` configures the Frigate storage volume to be synced
 
 In my case, I either set up a RAID volume or a single disk (NVMe, SSD, or HDD), and made sure it was mounted at the path `/mnt/frigate` before running the playbook.
 
+> There are a number of great guides for Frigate out there, but I am indebted especially to [this Frigate guide from Simplepush](https://www.simplepush.io/blog/frigate-nvr-push-notification-guide#run-mosquitto-mqtt-in-docker) for a broad understanding of all Frigate's moving parts.
+
 ### Shinobi setup
 
 After the playbook completes, visit the URL of your NVR, at the `/super` path, e.g. `http://dvr.local:8080/super`. The default login credentials are:

example.inventory.ini

@@ -3,4 +3,9 @@
 
 [dvr:vars]
 ansible_user=admin
+
 frigate_rtsp_password=changeme
+frigate_configure_mqtt_broker=1
+frigate_mosquitto_password=changeme
+frigate_mosquitto_extra_user=myusername
+frigate_mosquitto_extra_user_password=changeme

frigate/docker-compose.yml.j2

@@ -23,3 +23,22 @@ services:
       - "1935:1935" # RTMP feeds
     environment:
       FRIGATE_RTSP_PASSWORD: "{{ frigate_rtsp_password }}"
+{% if frigate_configure_mqtt_broker %}
+
+  mqtt:
+    container_name: mqtt
+    image: eclipse-mosquitto:2
+    volumes:
+      - ./mosquitto/logs/:/mosquitto/logs/
+      - ./mosquitto/mosquitto.conf:/mosquitto/config/mosquitto.conf
+      - ./mosquitto/mqtt-auth.conf:/mosquitto/config/mqtt-auth.conf
+      - ./mosquitto/mqtt-acl.conf:/mosquitto/config/mqtt-acl.conf
+    restart: unless-stopped
+    networks:
+      - frigate
+    ports:
+      - "1883:1883"
+{% endif %}
+
+networks:
+  frigate:

frigate/frigate.yml.j2

@@ -1,2 +1,25 @@
 database:
   path: /db/frigate.db
+mqtt:
+  host: mqtt
+  topic_prefix: frigate
+  client_id: frigate
+  user: frigate
+  password: {{ frigate_mosquitto_password }}
+detectors:
+  coral:
+    type: edgetpu
+    device: usb
+cameras:
+  office:
+    ffmpeg:
+      inputs:
+        - path: rtsp://10.0.10.10:554/rtsp
+          roles:
+            - detect
+            - rtmp
+    rtmp:
+      enabled: False # RTMP should be disabled if your stream is not H264
+    detect:
+      width: 1280 # update for your camera's resolution
+      height: 720 # update for your camera's resolution

frigate/main.yml

@@ -30,26 +30,41 @@
           - docker-compose
         state: present
 
-    - name: Create Frigate folder on Pi.
+    - name: Create Frigate folders on Pi.
       ansible.builtin.file:
-        path: "~/frigate"
+        path: "{{ item }}"
         state: directory
         mode: '0755'
       become: false
+      with_items:
+        - "~/frigate"
+        - "~/frigate/mosquitto"
+        - "~/frigate/mosquitto/logs"
+      register: create_folders
 
     - name: Copy Frigate files to Pi.
       ansible.builtin.template:
-        src: "{{ item }}"
+        src: "{{ item }}.j2"
         dest: "~/frigate/{{ item }}"
         mode: '0640'
       become: false
       notify: Restart frigate
       with_items:
-        - docker-compose.yml.j2
-        - frigate.yml.j2
+        - docker-compose.yml
+        - frigate.yml
+        - mosquitto/mosquitto.conf
+        - mosquitto/mqtt-auth.conf
+        - mosquitto/mqtt-acl.conf
 
     - name: Ensure Frigate is running.
       community.docker.docker_compose:
         project_src: "~/frigate/"
         build: false
       become: false
+
+    # TODO: This is the right command... but it doesn't seem to be running.
+    - name: Encrypt the mosquitto passwords.
+      community.docker.docker_container_exec:
+        container: mqtt
+        command: 'mosquitto_passwd -U /mosquitto/config/mqtt-auth.conf'
+      when: frigate_configure_mqtt_broker

frigate/mosquitto/mosquitto.conf.j2

@@ -0,0 +1,10 @@
+persistence true
+persistence_location /mosquitto/data
+
+log_dest file /mosquitto/logs/mosquitto.log
+log_dest stdout
+
+listener 1883
+
+allow_anonymous false
+password_file /mosquitto/config/mqtt-auth.conf

frigate/mosquitto/mqtt-acl.conf.j2

@@ -0,0 +1,5 @@
+user frigate
+topic frigate/#
+
+user {{ frigate_mosquitto_extra_user }}
+topic frigate/#

frigate/mosquitto/mqtt-auth.conf.j2

@@ -0,0 +1,2 @@
+frigate: {{ frigate_mosquitto_password }}
+{{ frigate_mosquitto_extra_user }}: {{ frigate_mosquitto_extra_user_password }}

main.yml

@@ -3,7 +3,7 @@
   become: true
 
   vars:
-    docker_users: ['pi']
+    docker_users: ['{{ ansible_user }}']
 
   handlers:
     - name: reboot pi