nginx.conf

# nginx reverse proxy for opencarstream
# Uncomment the nginx service in docker-compose.yml to use this.
#
# Put your TLS certificates in ./certs/:
#   ./certs/cert.pem   (fullchain)
#   ./certs/key.pem    (private key)
#
# Free certs: use certbot or acme.sh pointing at your DDNS domain.

server {
    listen 80;
    server_name _;
    # Redirect all HTTP → HTTPS
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    server_name stream.yourdomain.com;   # ← change to your DDNS domain

    ssl_certificate     /etc/nginx/certs/cert.pem;
    ssl_certificate_key /etc/nginx/certs/key.pem;
    ssl_protocols       TLSv1.2 TLSv1.3;
    ssl_ciphers         HIGH:!aNULL:!MD5;

    # ── Proxy to streamer container ────────────────────────────────────────
    location / {
        proxy_pass         http://streamer:8080;
        proxy_http_version 1.1;

        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # Critical for MJPEG: disable buffering so frames flow immediately
        proxy_buffering        off;
        proxy_cache            off;
        proxy_read_timeout     3600s;   # keep MJPEG connections alive
        proxy_send_timeout     3600s;
        send_timeout           3600s;
    }
}