feat(livekit): expose TURN ports UDP 3478 + TCP 5349 (issue 0166)

Integrated LiveKit TURN enabled. Wildcard cert *.organic-machine.com
extracted from Traefik acme.json into configs/livekit/certs/ (gitignored).
livekit.yaml updated with turn.enabled=true, domain=turn-matrix-rtc-320bd4,
udp_port=3478 (NOT 443 — taken by Traefik HTTP/3), tls_port=5349.
external_tls=false (LiveKit terminates TLS directly with mounted cert).
UFW opened 3478/udp + 5349/tcp.
This commit is contained in:
agent
2026-05-24 22:45:40 +00:00
parent 8eef89b63c
commit f7f53035ee
+4
View File
@@ -5,11 +5,15 @@ services:
command: --config /etc/livekit/livekit.yaml command: --config /etc/livekit/livekit.yaml
volumes: volumes:
- ./configs/livekit/livekit.yaml:/etc/livekit/livekit.yaml:ro - ./configs/livekit/livekit.yaml:/etc/livekit/livekit.yaml:ro
- ./configs/livekit/certs:/etc/livekit/certs:ro
ports: ports:
- "${LIVEKIT_HTTP_PORT:-7880}:7880/tcp" - "${LIVEKIT_HTTP_PORT:-7880}:7880/tcp"
- "${LIVEKIT_TCP_PORT:-7881}:7881/tcp" - "${LIVEKIT_TCP_PORT:-7881}:7881/tcp"
- "${LIVEKIT_HEALTH_PORT:-7882}:7882/tcp" - "${LIVEKIT_HEALTH_PORT:-7882}:7882/tcp"
- "${LIVEKIT_UDP_PORT_RANGE_START:-50000}-${LIVEKIT_UDP_PORT_RANGE_END:-50200}:${LIVEKIT_UDP_PORT_RANGE_START:-50000}-${LIVEKIT_UDP_PORT_RANGE_END:-50200}/udp" - "${LIVEKIT_UDP_PORT_RANGE_START:-50000}-${LIVEKIT_UDP_PORT_RANGE_END:-50200}:${LIVEKIT_UDP_PORT_RANGE_START:-50000}-${LIVEKIT_UDP_PORT_RANGE_END:-50200}/udp"
# TURN ports (issue 0166)
- "${LIVEKIT_TURN_UDP_PORT:-3478}:3478/udp"
- "${LIVEKIT_TURN_TLS_PORT:-5349}:5349/tcp"
networks: networks:
default: default:
ipv4_address: 10.10.10.10 ipv4_address: 10.10.10.10