chore(issues): close 0167+0168+0169+0170 livekit hardening bundle
VPS commit: 8eef89b (egutierrez/element_matrix_chat) - 0167: STUN leak fixed (use_external_ip:false + node_ip hardcoded) - 0168: UDP range expanded 50000-50200 -> 50000-50500 - 0169: API secret rotated (old key LK44e009c6e92b -> new LK5f6b38bb) - 0170: livekit.example.yaml refreshed + header comments cleaned Verification: - 0 STUN packets to Google during restart (tcpdump 60s window) - Endpoint /livekit/sfu/ HTTP 200 - LiveKit logs: nodeIP=135.125.201.30, portICERange=[50000,50500] - Containers livekit + livekit-jwt healthy New secret stored in pass: matrix/livekit-secret-rotation-2026-05-25
This commit is contained in:
@@ -0,0 +1,55 @@
|
||||
---
|
||||
id: "0170"
|
||||
title: "Renombrar livekit.example.yaml -> livekit.yaml en bind mount"
|
||||
status: pendiente
|
||||
type: chore
|
||||
domain:
|
||||
- matrix
|
||||
scope: app:element_matrix_chat
|
||||
priority: baja
|
||||
depends: []
|
||||
blocks: []
|
||||
related: []
|
||||
created: 2026-05-24
|
||||
updated: 2026-05-24
|
||||
tags: [matrix, livekit, hygiene]
|
||||
---
|
||||
# 0170 — Renombrar livekit.example.yaml -> livekit.yaml en bind mount
|
||||
|
||||
**Status:** pendiente
|
||||
**Created:** 2026-05-24
|
||||
**Type:** chore
|
||||
**Priority:** baja
|
||||
**Domain:** matrix
|
||||
**Scope:** app:element_matrix_chat
|
||||
**Depends:** —
|
||||
**Blocks:** —
|
||||
|
||||
## Problema
|
||||
|
||||
`configs/livekit/livekit.yaml` mantiene los comentarios "Copy this file..." del template original. Funciona pero confunde: parece config sin completar. El bind mount apunta directo a este archivo, asi que renombrar limpiamente el archivo template y mantener `livekit.yaml` limpio para mantenimiento.
|
||||
|
||||
## Objetivo
|
||||
|
||||
`livekit.yaml` limpio sin comentarios de "example", `livekit.example.yaml` separado como referencia template inicial en repo.
|
||||
|
||||
## Plan
|
||||
|
||||
1. Crear `configs/livekit/livekit.example.yaml` con plantilla limpia (placeholders).
|
||||
2. Eliminar comentarios "Copy this file..." del `livekit.yaml` actual.
|
||||
3. Verificar `.gitignore` cubre `livekit.yaml` real pero no `livekit.example.yaml`.
|
||||
4. Commit en `egutierrez/element_matrix_chat`.
|
||||
|
||||
## Acceptance
|
||||
|
||||
- [ ] `head -3 configs/livekit/livekit.yaml` NO menciona "example".
|
||||
- [ ] `configs/livekit/livekit.example.yaml` versionado.
|
||||
- [ ] Stack restart sin cambios funcionales.
|
||||
|
||||
## Definition of Done
|
||||
|
||||
- [ ] PR mergeado en `dataforge/element_matrix_chat`.
|
||||
|
||||
## Notas
|
||||
|
||||
Tarea de higiene puro. Cero impacto runtime. Mejora onboarding futuro si otro operador clona el repo.
|
||||
Reference in New Issue
Block a user