[Bug]: Frigate crashing to generate notifications.pem

[thphilipp]

Checklist

• I have updated to the latest available Frigate version.
• I have cleared the cache of my browser.
• I have tried a different browser to see if it is related to my browser.
• I have tried reproducing the issue in incognito mode to rule out problems with any third party extensions or plugins I have installed.
• I have asked the AI at https://docs.frigate.video about my issue.

Describe the problem you are having

Getting the following logs whilst frigate keeps crashing.

Steps to reproduce

1. Create my Configuration
2. starting the addon
3. crash
   ...

Version

0.16.20

In which browser(s) are you experiencing the issue with?

Edge

Frigate config file

mqtt:
  host: 192.168.xxx.xxx
  user: XXXXXXXXXXX
  password: XXXXXXXXXXX

birdseye:
  enabled: true
  mode: continuous

timestamp_style:
  position: tr
  format: '%d/%m/%Y %H:%M:%S'
  effect: solid

ffmpeg: {}

# ==== DETECTORS: vorerst nur CPU, Coral ist aus ====
detectors:
  cpu1:
    type: cpu
    num_threads: 3   # dein Ultra 9 hat genug Reserven

snapshots:
  enabled: true
  timestamp: true
  bounding_box: true
  retain:
    default: 16

record:
  enabled: true
  retain:
    mode: motion
  alerts:
    retain:
      days: 5
  detections:
    retain:
      days: 5

go2rtc:
  streams:
    Eingang: rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/101
    Eingang_sub:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/102

    Eingang_von_oben:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/201
    Eingang_von_oben_sub:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/202

    Erker_hinten:
      rtsp://XXXX:XXXX@192.168.178.164:554/Streaming/Channels/301
    Erker_hinten_sub:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/302

    Erker_hinten_seitlich:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/401
    Erker_hinten_seitlich_sub:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/402

    Schlafzimmer_unten:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/501
    Schlafzimmer_unten_sub:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/502

    Schuppen: rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/601
    Schuppen_sub:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/602

    Terrasse_von_oben:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/701
    Terrasse_von_oben_sub:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/702

    Terrasse: rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/801
    Terrasse_sub:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/802

    Dachboden:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/901
    Dachboden_sub:
      rtsp://XXXX:XXXX@192.168.xxx.xxx:554/Streaming/Channels/902

cameras:
  Eingang:
    ffmpeg:
      hwaccel_args: preset-vaapi
      inputs:
        # MAINSTREAM -> bessere Clips
        - path: rtsp://127.0.0.1:8554/Eingang
          input_args: preset-rtsp-restream
          roles:
            - detect
            - record
    detect:
      width: 1280
      height: 720
      fps: 6
      enabled: true
    motion:
      mask:
        0.005,0.667,0.033,0.625,0.37,0.276,0.371,0.238,0.374,0.272,0.464,0.23,0.52,0.188,0.621,0.234,0.63,0.056,0.794,0.344,0.99,0.718,0.985,0.973,0.069,0.751
      threshold: 20
      contour_area: 10
      improve_contrast: true
    notifications:
      enabled: true

  Eingang_von_oben:
    ffmpeg:
      hwaccel_args: preset-vaapi
      inputs:
        - path: rtsp://127.0.0.1:8554/Eingang_von_oben
          input_args: preset-rtsp-restream
          roles:
            - detect
            - record
    detect:
      width: 1280
      height: 720
      fps: 6
      enabled: true
    motion:
      mask:
        0.37,0.005,0.394,0.205,0.688,0.192,0.885,0.99,0.424,0.994,0.359,0.344,0.338,0.015
      threshold: 15
      contour_area: 10
      improve_contrast: true
    notifications:
      enabled: true

  Erker_hinten:
    ffmpeg:
      hwaccel_args: preset-vaapi
      inputs:
        - path: rtsp://127.0.0.1:8554/Erker_hinten
          input_args: preset-rtsp-restream
          roles:
            - detect
            - record
    detect:
      width: 1280
      height: 720
      fps: 6
      enabled: true
    motion:
      mask:
        - 0.226,0.303,0.269,0.097,0.674,0.085,0.852,0.277,0.857,0.548,0.774,0.557,0.774,0.711,0.646,0.766,0.646,0.644,0.567,0.59,0.566,0.396,0.52,0.375,0.357,0.387,0.359,0.483,0.23,0.497
        - 0.224,0.506,0.567,0.48,0.568,0.606,0.946,0.491,0.946,0.963,0.244,0.997
      threshold: 31
      contour_area: 15
      improve_contrast: true
    notifications:
      enabled: true

  Erker_hinten_seitlich:
    ffmpeg:
      hwaccel_args: preset-vaapi
      inputs:
        - path: rtsp://127.0.0.1:8554/Erker_hinten_seitlich
          input_args: preset-rtsp-restream
          roles:
            - detect
            - record
    detect:
      width: 1280
      height: 720
      fps: 6
      enabled: true
    motion:
      mask:
        0.503,0.005,0.717,0.015,0.726,0.275,0.703,0.87,0.035,0.978,0.379,0.011
      threshold: 40
      contour_area: 10
      improve_contrast: true
    notifications:
      enabled: true

  Schlafzimmer_unten:
    ffmpeg:
      hwaccel_args: preset-vaapi
      inputs:
        - path: rtsp://127.0.0.1:8554/Schlafzimmer_unten
          input_args: preset-rtsp-restream
          roles:
            - detect
            - record
    detect:
      width: 1280
      height: 720
      fps: 6
      enabled: true
    motion:
      mask:
        0.362,0.969,0.296,0.365,0.351,0.2,0.466,0.177,0.573,0.172,0.624,0.229,0.684,0.293,0.692,0.135,0.854,0.305,0.847,0.397,0.771,0.347,0.744,0.518,0.7,0.603,0.676,0.695,0.724,0.78,0.763,0.845,0.794,0.907,0.796,0.972
      threshold: 30
      contour_area: 30
      improve_contrast: true
    notifications:
      enabled: true

  Schuppen:
    ffmpeg:
      hwaccel_args: preset-vaapi
      inputs:
        - path: rtsp://127.0.0.1:8554/Schuppen
          input_args: preset-rtsp-restream
          roles:
            - detect
            - record
    detect:
      width: 1280
      height: 720
      fps: 6
      enabled: true
    motion:
      mask:
        0.225,0.051,0.376,0.031,0.638,0.048,0.615,0.986,0.01,0.994,0.221,0.436
      threshold: 20
      contour_area: 10
      improve_contrast: true
    notifications:
      enabled: true

  Terrasse_von_oben:
    ffmpeg:
      hwaccel_args: preset-vaapi
      inputs:
        - path: rtsp://127.0.0.1:8554/Terrasse_von_oben
          input_args: preset-rtsp-restream
          roles:
            - detect
            - record
    detect:
      width: 1280
      height: 720
      fps: 6
      enabled: true
    motion:
      mask:
        0.031,0.94,0.018,0.277,0.183,0.025,0.732,0.018,0.783,0.38,0.989,0.296,0.987,0.849,0.729,0.987
      threshold: 30
      contour_area: 15
      improve_contrast: true
    notifications:
      enabled: true

  Terrasse:
    ffmpeg:
      hwaccel_args: preset-vaapi
      inputs:
        - path: rtsp://127.0.0.1:8554/Terrasse
          input_args: preset-rtsp-restream
          roles:
            - detect
            - record
    detect:
      width: 1280
      height: 720
      fps: 6
      enabled: true
    motion:
      mask:
        0.003,0.324,0.187,0.154,0.271,0.116,0.44,0.036,0.534,0.023,0.781,0.041,0.783,0.963,0.133,0.995,0.005,0.607
      threshold: 30
      contour_area: 15
      improve_contrast: true
    notifications:
      enabled: true

  Dachboden:
    ffmpeg:
      hwaccel_args: preset-vaapi
      inputs:
        - path: rtsp://127.0.0.1:8554/Dachboden
          input_args: preset-rtsp-restream
          roles:
            - detect
            - record
    detect:
      width: 1280
      height: 720
      fps: 6
      enabled: true
    motion:
      mask:
        0.34,0.065,0.379,0.214,0.482,0.701,0.554,0.982,0.976,0.987,0.98,0.061
    notifications:
      enabled: true

detect:
  enabled: true

version: 0.16-0

face_recognition:
  enabled: true
  model_size: small

lpr:
  enabled: false

classification:
  bird:
    enabled: false

semantic_search:
  enabled: false
  reindex: false
  model_size: large

# WICHTIG: WebPush/Notifications aus, damit VAPID-Bug nicht zuschlägt
notifications:
  enabled: false
  email: philipp.thorsten@gmail.com

docker-compose file or Docker CLI command

Not possible!

Relevant Frigate log output

2025-11-17 08:09:49.373027212  Traceback (most recent call last):
2025-11-17 08:09:49.373031956    File "<frozen runpy>", line 198, in _run_module_as_main
2025-11-17 08:09:49.373033969    File "<frozen runpy>", line 88, in _run_code
2025-11-17 08:09:49.373039188    File "/opt/frigate/frigate/__main__.py", line 108, in <module>
2025-11-17 08:09:49.373061475      main()
2025-11-17 08:09:49.373088087    File "/opt/frigate/frigate/__main__.py", line 104, in main
2025-11-17 08:09:49.373258019      FrigateApp(config).start()
2025-11-17 08:09:49.373261636    File "/opt/frigate/frigate/app.py", line 653, in start
2025-11-17 08:09:49.373263596      self.init_dispatcher()
2025-11-17 08:09:49.373265071    File "/opt/frigate/frigate/app.py", line 346, in init_dispatcher
2025-11-17 08:09:49.373292214      comms.append(WebPushClient(self.config, self.stop_event))
2025-11-17 08:09:49.373341425                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-11-17 08:09:49.373347831    File "/opt/frigate/frigate/comms/webpush.py", line 65, in __init__
2025-11-17 08:09:49.373524493      self.vapid = Vapid01.from_file(os.path.join(CONFIG_DIR, "notifications.pem"))
2025-11-17 08:09:49.373528261                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-11-17 08:09:49.373530329    File "/usr/local/lib/python3.11/dist-packages/py_vapid/__init__.py", line 118, in from_file
2025-11-17 08:09:49.373531803      vapid.generate_keys()
2025-11-17 08:09:49.373534268    File "/usr/local/lib/python3.11/dist-packages/py_vapid/__init__.py", line 200, in generate_keys
2025-11-17 08:09:49.373560641      self.private_key = ec.generate_private_key(ec.SECP256R1,
2025-11-17 08:09:49.373575973                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Relevant go2rtc log output

Not possible!

Operating system

Home Assistant OS

Install method

Home Assistant Add-on

Network connection

Wired

Camera make and model

hikvision

Screenshots of the Frigate UI's System metrics pages

Not possible!

Any other information that may be helpful

No response

[inkeep-ai-assistant[bot]]

Based on your error logs, you're experiencing a known issue with Frigate version 0.16.2 related to VAPID key generation for WebPush notifications(1). The error TypeError: curve must be an EllipticCurve instance occurs when Frigate attempts to initialize the WebPush notification system and generate the notifications.pem file(1).

I notice in your configuration you have notifications disabled at the global level (notifications: enabled: false), but you still have notifications enabled for individual cameras(2). This configuration mismatch may be causing Frigate to attempt initialization of the notification system despite your intent to disable it.

To resolve this issue:

1. Disable notifications completely by removing or setting enabled: false for all camera-level notification settings in addition to your global setting(2):

notifications:
  enabled: false
  email: philipp.thorsten@gmail.com

And remove the notifications: enabled: true lines from each camera configuration.

2. Alternatively, downgrade to version 0.16.1, which has been confirmed to work without this issue(1)(3).

3. If you need notifications, wait for a container update that resolves the cryptographic dependency conflict, as this appears to be a regression introduced in version 0.16.2(1).

The root cause is a compatibility problem with the cryptographic library where the VAPID key generation expects a different object type than what's being provided(1). This is specifically related to the WebPush notification system that uses the VAPID specification for secure delivery(2).

**

📚 Sources:

1. [Bug]: Frigate keeps crashing on attempting to generate notifications.pem
2. Notifications
3. [Config Support]: Frigate Reolink auth request unexpected status: 502 while sending to client

---

Have another question? Just tag @inkeep.

[hawkeye217]

The AI's response is correct here. This is a duplicate of #20548

[Landonthi]

@hawkeye217 Any idea when this issue will be fixed in the next update? Or are you mainly focusing on 0.17 now?

[hawkeye217]

Could you try the latest master build to see if the issue is corrected there? The master branch is the 0.16 branch.

ghcr.io/blakeblackshear/frigate:592c245

Actually, that build will not fix the issue, but I've put up a PR for a change that will: #21126

EDIT: this build should fix the issue. If you can, please test: ghcr.io/blakeblackshear/frigate:7167cf5