From 35bc2b369bb4bb9b0da84244f8b96433bd761e22 Mon Sep 17 00:00:00 2001
From: Jeff Emmett <jeffemmett@gmail.com>
Date: Sun, 15 Feb 2026 09:48:10 -0700
Subject: [PATCH] fix: nginx-rtmp needs CHOWN cap + depends_on archive-worker
 for DNS

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 docker-compose.yml    | 6 ++++++
 nginx-rtmp/nginx.conf | 1 +
 2 files changed, 7 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 5107d6c..7ec972a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -43,6 +43,10 @@ services:
       - ALL
     cap_add:
       - NET_BIND_SERVICE
+      - CHOWN
+      - DAC_OVERRIDE
+      - SETGID
+      - SETUID
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.rtube-hls.rule=Host(`rtube.online`) && PathPrefix(`/hls`)"
@@ -52,6 +56,8 @@ services:
     networks:
       - traefik-public
       - rtube-internal
+    depends_on:
+      - archive-worker
 
   archive-worker:
     build:
diff --git a/nginx-rtmp/nginx.conf b/nginx-rtmp/nginx.conf
index 34e8bef..11df5e2 100644
--- a/nginx-rtmp/nginx.conf
+++ b/nginx-rtmp/nginx.conf
@@ -25,6 +25,7 @@ rtmp {
             hls_cleanup on;
 
             # On stream end - trigger archive
+            # Use service name (Docker Compose DNS)
             on_publish_done http://archive-worker:8081/archive;
 
             # Allow publishing from anywhere (use stream key for security)