diff --git a/machines/frigate/secrets.yaml b/machines/frigate/secrets.yaml
index 06fa5a5..1b58bbc 100644
--- a/machines/frigate/secrets.yaml
+++ b/machines/frigate/secrets.yaml
@@ -1,4 +1,4 @@
-frigate: ENC[AES256_GCM,data:Xuy7MPkpOuu44Joy5NqiPsSUQfD99yViHrhxWrpXy+gbpVMbrmZny6kIqe+0fF2y3lvWgzXSFB0xRkdKAVfv8MMdHDb7Km1/Xuz68CQk1bP7ej7Og17sJHZ225kKZXxYuaB/thcnuY7z11v/6PeEndrCVWnRq7jwaAk7EdP5+2K8+FNA3koQPX/RvuKxh8kS5w==,iv:psqMkMgMTyBCTyS340eRSRIKQRvHpSsGxDkdygTX1X4=,tag:OrhcQS7b6p0YGMolvLwJ5g==,type:str]
+frigate: ENC[AES256_GCM,data:jqguHbqN/hGR5hYyVaFfXsqhHKA+eV0OuJXlciu6vi2pp4yx6fmyejT5TwOH7R+5UpeH1W0OF7hSd3XCtiwK6chHtFmEBC1mUOyqHJY1I5CJ1eHSGU28RnRBNei/bydGB2x7zP0fHqigHncKZL/pWoEgyadmTKCu0+gNubKRHiUC1U/xONcKobZ1YNHZbPR5og==,iv:TSys0Qg0I02XjSHjSZanPV/LLK+LBZeebKasxoZdpAs=,tag:q6OPZkhogxi0gqdwQ19fGw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -23,8 +23,8 @@ sops:
             dExTUXFwSm5rcTZVS2RoOEdNd0ZpN1EKZUbaT/bG0qeovQa/YaUTLxUc2KDNumCp
             aG37DJywQUWHToLCJ5RRmXYN+0Y+2+a+HxXMZ6glpo+8wTXD1ovnwA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-03-23T08:40:20Z"
-    mac: ENC[AES256_GCM,data:P9iwM0AZabLVNkHhQkF29ttF88/KhvElOYiFJBOWM/o4qpqlHvpzWU6tZ9V54sLeN0R1dk+QgkinENL2RR3utOVxLtR+13jeOQi84Wjbbey/oZ5hnnIoW2eqYJcQirKuGYYg9NMNd4apKDEXWPuLhZeahQcruFmGnEvXqCUZ1Cc=,iv:jIZmCfnNzuL+j88uAssXBHK+6wiNkfX7LQdFuoAwpxg=,tag:jHoxsAcXRl7QHni6CVzVYg==,type:str]
+    lastmodified: "2023-03-26T14:26:15Z"
+    mac: ENC[AES256_GCM,data:0PeNZGGPRcT385nwym2zgjl+rB7b3u/lCj1jF0MB2UPV73ig42A2ZNm2PFAvH0pzPpDiwW+4fZM/4WJbos7XwFC3+jKW5zOxLFmMvNDd7Y3eM0jYbHqxKhWr3I+SNgPyUPAjiZmN1muNpxLi2vie/jz6jABz9ETOksd8PrOjRu4=,iv:pJy6M6HwQfxL7ifkOwy7q2kYgx8a1c38PUMXeFJgv8o=,tag:gDYEuNwFqtc8YXVhWk0JHw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3
diff --git a/modules/frigate/config.yml b/modules/frigate/config.yml
index 6590a2b..e27577d 100644
--- a/modules/frigate/config.yml
+++ b/modules/frigate/config.yml
@@ -7,41 +7,69 @@ mqtt:
 logger:
   default: info
 
+detectors:
+  ov:
+    type: openvino
+    model:
+      path: /openvino-model/ssdlite_mobilenet_v2.xml
+
+model:
+  width: 300
+  height: 300
+  input_tensor: nhwc
+  input_pixel_format: bgr
+  labelmap_path: /openvino-model/coco_91cl_bkgr.txt
+
 record:
   enabled: true
   retain:
-    days: 5
+    days: 4
+  events:
+    retain:
+      default: 14
 
 snapshots:
   enabled: true
 
 detect:
-  enabled: False
+  enabled: True
+  width: 640
+  height: 480
+
+objects:
+  track:
+    - person
+    - cat
+  filters:
+    person:
+      mask:
+        - 81,294,83,189,0,174,0,265,24,255,36,271
 
 ffmpeg:
-  hwaccel_args: -hwaccel vaapi -hwaccel_device /dev/dri/renderD128 -hwaccel_output_format yuv420p
+  hwaccel_args: preset-vaapi
+  output_args:
+    record: preset-record-generic-audio-aac
+
+go2rtc:
+  streams:
+    reolink:
+      # - rtsp://admin:{FRIGATE_DOORBELL_PASSWORD}@10.0.0.31/h264Preview_01_main
+      - http://10.0.0.31/flv?port=1935&app=bcs&stream=channel0_main.bcs&user=hass&password={FRIGATE_DOORBELL_PASSWORD}
+      - ffmpeg:reolink#audio=opus
+    reolink_sub:
+      # - rtsp://admin:{FRIGATE_DOORBELL_PASSWORD}@10.0.0.31/h264Preview_01_sub
+      - http://10.0.0.31/flv?port=1935&app=bcs&stream=channel0_ext.bcs&user=hass&password={FRIGATE_DOORBELL_PASSWORD}
 
 cameras:
   deurbel:
     ffmpeg:
       inputs:
         # - path: rtsp://admin:{FRIGATE_DOORBELL_PASSWORD}@10.0.0.31/h264Preview_01_main
-        - path: https://10.0.0.31/flv?port=1935&app=bcs&stream=channel0_main.bcs&user=admin&password={FRIGATE_DOORBELL_PASSWORD}
+        - path: rtsp://127.0.0.1:8554/reolink?video=copy&audio=aac
+          input_args: preset-rtsp-restream
           roles:
             - record
-            - rtmp
-          input_args:
-            - -avoid_negative_ts
-            - make_zero
-            - -fflags
-            - +genpts+discardcorrupt
-            - -flags
-            - low_delay
-            - -strict
-            - experimental
-            - -analyzeduration
-            - 1000M
-            - -probesize
-            - 1000M
-            - -rw_timeout
-            - "5000000"
+        - path: rtsp://127.0.0.1:8554/reolink_sub?video=copy
+          input_args: preset-rtsp-restream
+          roles:
+            - detect
diff --git a/modules/frigate/default.nix b/modules/frigate/default.nix
index a6bb3c3..ec5d36f 100644
--- a/modules/frigate/default.nix
+++ b/modules/frigate/default.nix
@@ -25,9 +25,12 @@ in
     virtualisation.oci-containers.containers = {
       frigate = {
         autoStart = true;
-        image = "blakeblackshear/frigate:0.11.1";
+        image = "ghcr.io/blakeblackshear/frigate:0.12.0-rc1";
         ports = [
           "5000:5000"
+          "8554:8554" # RTSP feeds
+          "8555:8555/tcp" # WebRTC over tcp
+          "8555:8555/udp" # WebRTC over udp
         ];
         volumes = [
           "/etc/localtime:/etc/localtime:ro"