# ============================================================
#  livekit.yaml — LiveKit Media Server Configuration
#  Mount this at /etc/livekit.yaml in the livekit container.
#
#  Replace LK_MATRIX_KEY and LK_MATRIX_SECRET with the values
#  generated by:
#    docker run --rm livekit/livekit-server:latest generate-keys
# ============================================================

# HTTP/WebSocket port (proxied by Traefik)
port: 7880

# Bind to all interfaces (Traefik reaches it on 127.0.0.1:7880
# since both livekit and the host share the network stack)
bind_addresses:
  - ""

rtc:
  # Direct TCP port for clients that can't use UDP
  tcp_port: 7881

  # UDP port range for media relay
  # Starts at 50100 to leave room below for coturn if needed.
  # Coturn is configured with min-port=50201 to avoid overlap.
  port_range_start: 50100
  port_range_end: 50200

  # Required when running behind NAT — LiveKit advertises your
  # public IP to clients rather than the internal Docker IP
  use_external_ip: true

  # Disable loopback candidates — not useful in production
  enable_loopback_candidate: false

  # Optional: Use your coturn server as a TURN relay for LiveKit.
  # This improves connectivity for clients behind strict firewalls.
  # Uncomment and fill in if you want LiveKit to use coturn:
  #
  # turn_servers:
  #   - host: matrix.example.com
  #     port: 3478
  #     protocol: udp
  #     secret: "YOUR_COTURN_SECRET"   # Same secret as coturn.conf
  #   - host: matrix.example.com
  #     port: 3478
  #     protocol: tcp
  #     secret: "YOUR_COTURN_SECRET"
  #   - host: matrix.example.com
  #     port: 5349
  #     protocol: tls
  #     secret: "YOUR_COTURN_SECRET"

# API keys — must match LIVEKIT_KEY and LIVEKIT_SECRET
# in the lk-jwt-service environment variables
keys:
  YOUR_LK_KEY: YOUR_LK_SECRET   # EDIT BOTH OF THESE

# Optional: enable LiveKit's built-in TURN server.
# Only useful for LiveKit connections — cannot be used by coturn
# or legacy Matrix calls. Use this if you don't want a separate
# coturn deployment and only care about group calls.
#
# turn:
#   enabled: true
#   udp_port: 3478
#   relay_range_start: 50300
#   relay_range_end: 50400
#   domain: livekit.example.com