Hide credentials in RTSP cameras and servers

[mgdelafuente]

Question

Hello everyone and sorry if this is a repeated question,

I am implementing mediamtx at my home to centralize connections to my cameras and to use rtsps. To do this I will only activate rtsps over tcp and using username and password with sha256 encryption.
The problem I see is that, when listing my cameras in the configuration file, I am forced to indicate the connection url with the format "rtsp://user:password@ip:port/resource".

Is there a way to hide the camera credentials in some way?

I can think of creating the configuration file just before running mediamtx and deleting the file as soon as it has been run. I could implement this using systemd through ExecStartPre, ExecStart and ExecStartPost.
Is there a better way to do this?

[mgdelafuente]

Also I see I can encrypt the configuration https://github.com/bluenviron/mediamtx?tab=readme-ov-file#encrypt-the-configuration

[aler9]

Exactly. Encrypt the configuration and specify a key when you launch the server.