fix-11 - viewer-count

mediamtx.yml

@@ -1,29 +1,64 @@
-# lauscht auf den Standard-Ports
-rtmp: yes
-hls: yes
-# optional: enable ll-hls: yes
-httpAddress: :8888
-rtmpAddress: :1935
+# --- Logging ---
+logLevel: info
 
-
-# Control API (für Dashboard‑Status)
+# --- Control API (geschützt) ---
 api: yes
 apiAddress: :9997
-# Auth für API empfehlenswert
-apiUser: admin
-apiPass: starkes-passwort
+apiEncryption: no
+apiAllowOrigin: "*"
 
-
-# Metriken (optional)
+# --- Metrics (optional) ---
 metrics: yes
 metricsAddress: :9998
+metricsEncryption: no
+metricsAllowOrigin: "*"
 
+# --- RTMP (Ingest) ---
+rtmp: yes
+rtmpAddress: :1935
+rtmpEncryption: "no"
 
-# Allgemeine Pfadeinstellungen (alle Streams)
+# --- HLS (Playback) ---
+hls: yes
+hlsAddress: :8888
+hlsEncryption: no
+hlsVariant: lowLatency         # <— statt mpegts
+hlsSegmentDuration: 1s         # 1–2s (Segment = GOP-Vielfaches, s.u.)
+hlsPartDuration: 200ms         # 200–350ms
+hlsSegmentCount: 7             # hat keinen Einfluss auf Latenz, aber genügt
+hlsAlwaysRemux: yes            # schneller Join / weniger Anlaufzeit
+
+# Nicht benötigt
+rtsp: no
+webrtc: no
+srt: no
+pprof: no
+playback: no
+
+# --- AUTH: Intern (API + Publish) ---
+# authMethod: internal
+authInternalUsers:
+  # Admin für API (und optional metrics)
+  - user: sha256:jGl25bVBBBW96Qi9Te4V37Fnqchz/Eu4qB9vKrRIqRg=
+    pass: sha256:jGl25bVBBBW96Qi9Te4V37Fnqchz/Eu4qB9vKrRIqRg=
+    permissions:
+      - action: api
+      - action: metrics
+
+  # Publisher für stream1
+  - user: sha256:CCgj5KGMqEZgxOc5o4drwj9BVDg46eOLxuPMHhSRKAc=
+    pass: sha256:XohImNooBHFR0OVvjcYpJ3NgPQ1qq73WKhHvch0VQtg=
+    permissions:
+      - action: publish
+        path: stream1
+
+  # NEU: jeder darf lesen (HLS/RTMP/RTSP)
+  - user: any
+    permissions:
+      - action: read
+        path:
+
+# --- Paths ---
 paths:
-  stream1:
-    publishUser: ingest1
-    publishPass: supersecret1
-  stream2:
-    publishUser: ingest2
-    publishPass: supersecret2
+  # keine Legacy-Creds mehr hier!
+  all: {}