# LiveKit SFU config (non-secret — the API key/secret are injected via the LIVEKIT_KEYS env var
# in docker-compose, sourced from .env, so nothing secret lives in git).
#
# Media plane: LiveKit needs UDP reachable from clients (NPM only proxies the HTTP/WS signaling on
# 7880). The UDP range + TCP fallback below are published as HOST ports in docker-compose. On the
# VPS, if the server sits behind NAT and can't auto-detect its public IP, set rtc.node_ip to it.
port: 7880                     # signaling (HTTP/WS) — NPM proxies wss://livekit.bizgaze.com -> here
rtc:
  tcp_port: 7881               # WebRTC-over-TCP fallback (restrictive networks)
  udp_port: 50000              # SINGLE UDP media port (all participants mux over it) — minimizes
                               # the NAT port-forward to one UDP + one TCP port.
  # This box sits behind NAT (private 192.168.88.61 behind public 118.95.33.89). Auto-detection
  # would find the wrong (outbound) IP, so pin the inbound public IP clients actually reach.
  use_external_ip: false
  node_ip: 118.95.33.89

# Embedded TURN over TLS on 443 helps clients on locked-down networks. Left off by default because
# NPM already owns 443; enable via a dedicated hostname + NPM stream if you need it (see DEPLOY.md).
turn:
  enabled: false

logging:
  level: info