11 Commits

Author SHA1 Message Date
agent f7f53035ee feat(livekit): expose TURN ports UDP 3478 + TCP 5349 (issue 0166)
Integrated LiveKit TURN enabled. Wildcard cert *.organic-machine.com
extracted from Traefik acme.json into configs/livekit/certs/ (gitignored).
livekit.yaml updated with turn.enabled=true, domain=turn-matrix-rtc-320bd4,
udp_port=3478 (NOT 443 — taken by Traefik HTTP/3), tls_port=5349.
external_tls=false (LiveKit terminates TLS directly with mounted cert).
UFW opened 3478/udp + 5349/tcp.
2026-05-24 22:45:40 +00:00
Egutierrez 8eef89b63c feat(livekit): rotate secret + hardcode external_ip + expand UDP range + hygiene
- Rotate API key/secret (previously exposed in agent session, issue 0169)
- Hardcode node_ip + disable use_external_ip (kill Google STUN leak, issue 0167)
- Expand UDP range 50000-50200 -> 50000-50500 (capacity, issue 0168)
- Refresh livekit.example.yaml template + add *.bak.* to gitignore (issue 0170)

Note: live secrets in configs/livekit/livekit.yaml + .env (gitignored)
docker-compose.livekit.yml has pre-existing operator TURN changes (issue 0166) left untouched.
2026-05-24 22:43:49 +00:00
egutierrez 4909b8447e feat: MAS as auth provider + remove synapse-admin
- Migrate Synapse SQLite -> Postgres (synapse_port_db)
- Enable MSC3861 (matrix_authentication_service block)
- Disable password_config legacy
- Add bcrypt passwords scheme to MAS
- Register 4 MAS clients (element, matrix_pc, matrix_android, admin_panel)
- syn2mas migrated 21 users + 41 access_tokens
- Patch well-known with org.matrix.msc2965.authentication
- Remove synapse-admin container (replaced by custom admin panel — issue 0163)

Issue: 0162
Refs: dev/flows/0010-matrix-client-pc.md, dev/flows/0011-matrix-client-android.md
2026-05-24 20:51:41 +00:00
egutierrez df08e1fbbf docs: añadir nota de CI/CD al README
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-12 21:02:10 +02:00
egutierrez 6e7b35a87f primer intento authenticacion qr mas 2025-11-18 23:50:42 +00:00
egutierrez 2af772d90d remove broken submodule element-call 2025-11-11 00:59:13 +00:00
egutierrez ec248a00ff chat extra que ha aparecido 2025-11-11 00:56:07 +00:00
egutierrez 60a7385b76 livekit añadido 2025-11-11 00:54:43 +00:00
egutierrez d873b13060 actualizados servidores 2025-11-10 20:28:26 +00:00
egutierrez 20501ab8bc livekit añadido 2025-11-10 16:16:34 +01:00
egutierrez d13ab16256 repositorio iniciado 2025-11-08 22:27:01 +01:00