Files
element_matrix_chat/configs/livekit/livekit.example.yaml
T
Egutierrez 8eef89b63c feat(livekit): rotate secret + hardcode external_ip + expand UDP range + hygiene
- Rotate API key/secret (previously exposed in agent session, issue 0169)
- Hardcode node_ip + disable use_external_ip (kill Google STUN leak, issue 0167)
- Expand UDP range 50000-50200 -> 50000-50500 (capacity, issue 0168)
- Refresh livekit.example.yaml template + add *.bak.* to gitignore (issue 0170)

Note: live secrets in configs/livekit/livekit.yaml + .env (gitignored)
docker-compose.livekit.yml has pre-existing operator TURN changes (issue 0166) left untouched.
2026-05-24 22:43:49 +00:00

38 lines
995 B
YAML

# LiveKit configuration example for Element Call.
# Copy this file to configs/livekit/livekit.yaml and replace the placeholder
# values before starting the stack.
port: 7880
bind_addresses:
- "0.0.0.0"
log_level: info
region: "REGION_PLACEHOLDER"
rtc:
tcp_port: 7881
port_range_start: 50000
port_range_end: 50500
# Set use_external_ip to false and hardcode node_ip to your public IPv4 to
# prevent LiveKit from probing Google STUN at startup.
use_external_ip: false
node_ip: "PUBLIC_IPV4_PLACEHOLDER"
force_tcp: false
# Optional TURN forwarding. Enable only if you already operate a TURN server.
turn:
enabled: false
domain: ""
cert_file: ""
key_file: ""
tls_port: 5349
udp_port: 443
external_tls: true
# The keys map controls which API key/secret pairs are valid.
# Generate your own pair with: openssl rand -hex 32
# Secrets must be at least 32 characters long.
keys:
LIVEKIT_API_KEY_PLACEHOLDER: LIVEKIT_API_SECRET_PLACEHOLDER
room:
auto_create: false