r/frigate: Update to v0.15

Frigate has evolved a lot over the past year or so since v0.13.
Notably, some of the configuration options have been renamed, and
_events_ have become _alerts_ and _detections_.  There's also now
support for authenication, though we don't need it because we're using
Authelia.

roles/frigate-caddy/templates/Caddyfile.j2

@@ -4,6 +4,7 @@
    forward_auth {{ frigate_caddy_forward_auth.url }} {
        uri {{ frigate_caddy_forward_auth.path }}
        header_up Host {upstream_hostport}
+       copy_headers Remote-User
 
        @unauthorized status 401
        handle_response @unauthorized {
@@ -13,7 +14,7 @@
     }
 
 {% endif %}
-    reverse_proxy localhost:5000
+    reverse_proxy localhost:8971
 {% if frigate_caddy_acme|d %}
 
     tls {{ frigate_caddy_acme.email }} {

roles/frigate/defaults/main.yml

@@ -1,4 +1,4 @@
-frigate_image_tag: 0.12.1
+frigate_image_tag: 0.15.1
 frigate_image: ghcr.io/blakeblackshear/frigate:{{ frigate_image_tag }}
 frigate_mqtt:
   host: localhost
@@ -10,6 +10,8 @@ frigate_enable_gpu: false
 frigate_enable_tpu: false
 frigate_shm_size: 256
 frigate_config:
+  database:
+    path: /media/frigate/frigate.db
   mqtt: '{{ frigate_mqtt }}'
   detectors: '{{ frigate_detectors }}'
   cameras: '{{ frigate_cameras }}'

roles/frigate/tasks/main.yml

@@ -37,7 +37,7 @@
     path: /var/lib/frigate/tmp
     owner: frigate
     group: frigate
-    mode: '0700'
+    mode: u=rwx,go=rx
     state: directory
   tags:
   - datadir

roles/frigate/templates/frigate.container.j2

@@ -22,7 +22,9 @@ PodmanArgs=--shm-size {{ frigate_shm_size }}m
 EnvironmentFile=/etc/frigate/environ
 Volume=/var/lib/frigate/media:/media/frigate:rw,z,U
 Volume=/var/lib/frigate/tmp:/tmp:rw,z,U
+Volume=/var/lib/frigate/model_cache:/config/model_cache:rw,z,U
 Volume=/etc/frigate/config.yml:/config/config.yml:ro
+Tmpfs=/tmp/cache
 {% if frigate_enable_tpu %}
 AddDevice=/dev/apex_0
 {% endif %}
@@ -41,6 +43,7 @@ TimeoutStartSec=10m
 TimeoutStopSec=infinity
 StateDirectory=%N/tmp
 StateDirectory=%N/media
+StateDirectory=%N/model_cache
 
 [Install]
 WantedBy=multi-user.target