fix: paths, ports et for mediamtx

Author: rambo

docker-compose-local.yml

@@ -690,12 +690,16 @@ services:
       MTX_RTSPTRANSPORTS: "tcp"  # Can't do UDP without host mode network
       MTX_WEBRTCADDITIONALHOSTS: *serverdomain
     ports:
-      - "8554:8554"
-      - "1935:1935"
-      - "9888:9888"
-      - "9889:9889"
+      - "1936:1936"
+      - "8322:8322"
+      - "8890:8890"
       - "9000:9000"
       - "9001:9001"
+      - "9888:9888"
+      - "9889:9889"
+      - "9996:9996"
+      - "9998:9998"
+      - "9999:9999"
       - "8890:8890/udp"
       - "8189:8189/udp"
     depends_on:

docker-compose.yml

@@ -618,12 +618,16 @@ services:
       MTX_RTSPTRANSPORTS: "tcp"  # Can't do UDP without host mode network
       MTX_WEBRTCADDITIONALHOSTS: *serverdomain
     ports:
-      - "8554:8554"
-      - "1935:1935"
-      - "9888:9888"
-      - "9889:9889"
+      - "1936:1936"
+      - "8322:8322"
+      - "8890:8890"
       - "9000:9000"
       - "9001:9001"
+      - "9888:9888"
+      - "9889:9889"
+      - "9996:9996"
+      - "9998:9998"
+      - "9999:9999"
       - "8890:8890/udp"
       - "8189:8189/udp"
     depends_on:

mediamtx.yml

@@ -56,7 +56,7 @@ api: yes
 apiAddress: :9997
 # Enable TLS/HTTPS on the Control API server.
 apiEncryption: yes
-apiServerKey: /le_certs/rasenmaeher/fullchain.key
+apiServerKey: /le_certs/rasenmaeher/privkey.pem
 apiServerCert: /le_certs/rasenmaeher/fullchain.pem
 # Value of the Access-Control-Allow-Origin header provided in every HTTP response.
 apiAllowOrigin: '*'
@@ -74,7 +74,7 @@ metrics: yes
 metricsAddress: :9998
 # Enable TLS/HTTPS on the Metrics server.
 metricsEncryption: yes
-metricsServerKey: /le_certs/rasenmaeher/fullchain.key
+metricsServerKey: /le_certs/rasenmaeher/privkey.pem
 metricsServerCert: /le_certs/rasenmaeher/fullchain.pem
 # Value of the Access-Control-Allow-Origin header provided in every HTTP response.
 metricsAllowOrigin: '*'
@@ -92,7 +92,7 @@ pprof: yes
 pprofAddress: :9999
 # Enable TLS/HTTPS on the pprof server.
 pprofEncryption: yes
-pprofServerKey: /le_certs/rasenmaeher/fullchain.key
+pprofServerKey: /le_certs/rasenmaeher/privkey.pem
 pprofServerCert: /le_certs/rasenmaeher/fullchain.pem
 # Value of the Access-Control-Allow-Origin header provided in every HTTP response.
 pprofAllowOrigin: '*'
@@ -110,7 +110,7 @@ playback: yes
 playbackAddress: :9996
 # Enable TLS/HTTPS on the playback server.
 playbackEncryption: yes
-playbackServerKey: /le_certs/rasenmaeher/fullchain.key
+playbackServerKey: /le_certs/rasenmaeher/privkey.pem
 playbackServerCert: /le_certs/rasenmaeher/fullchain.pem
 # Value of the Access-Control-Allow-Origin header provided in every HTTP response.
 playbackAllowOrigin: '*'
@@ -148,11 +148,11 @@ multicastIPRange: 224.1.0.0/16
 multicastRTPPort: 8002
 # Port of all UDP-multicast/RTCP listeners. This is needed only when "multicast" is in rtspTransports.
 multicastRTCPPort: 8003
-rtspServerKey: /le_certs/rasenmaeher/fullchain.key
+rtspServerKey: /le_certs/rasenmaeher/privkey.pem
 rtspServerCert: /le_certs/rasenmaeher/fullchain.pem
 # Authentication methods. Available are "basic" and "digest".
 # "digest" doesn't provide any additional security and is available for compatibility only.
-rtspAuthMethods: [basic, digest]
+rtspAuthMethods: [basic]
 
 ###############################################
 # Global settings -> RTMP server
@@ -166,7 +166,7 @@ rtmpAddress: :1935
 rtmpEncryption: "strict"
 # Address of the RTMPS listener. This is needed only when encryption is "strict" or "optional".
 rtmpsAddress: :1936
-rtmpServerKey: /le_certs/rasenmaeher/fullchain.key
+rtmpServerKey: /le_certs/rasenmaeher/privkey.pem
 rtmpServerCert: /le_certs/rasenmaeher/fullchain.pem
 
 ###############################################
@@ -179,7 +179,7 @@ hlsAddress: :9888
 # Enable TLS/HTTPS on the HLS server.
 # This is required for Low-Latency HLS.
 hlsEncryption: yes
-hlsServerKey: /le_certs/rasenmaeher/fullchain.key
+hlsServerKey: /le_certs/rasenmaeher/privkey.pem
 hlsServerCert: /le_certs/rasenmaeher/fullchain.pem
 # Value of the Access-Control-Allow-Origin header provided in every HTTP response.
 # This allows to play the HLS stream from an external website.
@@ -232,7 +232,7 @@ webrtc: yes
 webrtcAddress: :9889
 # Enable TLS/HTTPS on the WebRTC server.
 webrtcEncryption: yes
-webrtcServerKey: /le_certs/rasenmaeher/fullchain.key
+webrtcServerKey: /le_certs/rasenmaeher/privkey.pem
 webrtcServerCert: /le_certs/rasenmaeher/fullchain.pem
 # Value of the Access-Control-Allow-Origin header provided in every HTTP response.
 # This allows to play the WebRTC stream from an external website.
@@ -318,7 +318,7 @@ pathDefaults:
   sourceFingerprint:
   # If the source is a URL, it will be pulled only when at least
   # one reader is connected, saving bandwidth.
-  sourceOnDemand: yes
+  sourceOnDemand: no
   # If sourceOnDemand is "yes", readers will be put on hold until the source is
   # ready or until this amount of time has passed.
   sourceOnDemandStartTimeout: 10s