# ============================================================
#  continuwuity.toml — Continuwuity Homeserver Configuration
#  Mount this at /etc/continuwuity.toml in the container.
#
#  Most settings are handled via environment variables in
#  docker-compose.yml. This file handles things that are
#  easier to express in TOML: TURN and MatrixRTC config.
# ============================================================

[global]

# ------------------------------------------------------------
#  TURN / STUN — for legacy 1:1 voice and video calls
#  Uses shared secret auth (time-limited credentials, more secure
#  than static username/password).
#  The turn_secret MUST match static-auth-secret in coturn.conf.
# ------------------------------------------------------------
turn_uris = [
    "turn:matrix.example.com?transport=udp",
    "turn:matrix.example.com?transport=tcp",
    "turns:matrix.example.com?transport=udp",   # TURN over TLS (port 5349)
    "turns:matrix.example.com?transport=tcp"
]

# Must match `static-auth-secret` in coturn.conf
turn_secret = "YOUR_COTURN_SECRET"   # EDIT THIS

# How long TURN credentials are valid (seconds). 24h default.
turn_ttl = 86400

# Set to true only if you want unauthenticated/guest users to
# be able to use TURN. Not recommended — leaves TURN open to abuse.
turn_allow_guests = false


# ------------------------------------------------------------
#  MatrixRTC / Element Call — group calls via LiveKit
#  Clients discover the LiveKit endpoint via the
#  /_matrix/client/v1/rtc/transports API (MSC4143).
#  The URL here points to your lk-jwt-service, NOT LiveKit directly.
# ------------------------------------------------------------
[global.matrix_rtc]
foci = [
    { type = "livekit", livekit_service_url = "https://livekit.example.com" },
]