I've noticed that frigate exposes port 5000 by default to unauthenticated users. I current run frigate in its own container on its own IP. Is there a way for me to close this port? How do people normally structure this? Put frigate on a separate vlan? Seems like overkill...
#Running Frigate on separate container
manic flame
split glen
you can just choose not to expose that port in your container configuration
manic flame
I can't do that as it's running on an ipvlan on its own IP.
I like to segregate all my containers on their own IP but maybe this is one I shouldn't?
split glen
just a random example from the docs, and you can see that port 5000 is commented out: https://docs.frigate.video/frigate/installation/#docker
why can't you control the network configuration for that container?
manic flame
https://docs.docker.com/engine/network/drivers/ipvlan/
ipvlan gives the container essentially it's own networking, so everything is exposed.
