AAA
cc44764e74
Restores SFU subscription reconciliation across real LiveKit event ordering and tightens production logging.
39 lines
1.6 KiB
Plaintext
39 lines
1.6 KiB
Plaintext
# Minimal single-node LiveKit capacity for Screener's optional automatic SFU
|
|
# fallback. Copy this file to an untracked service-owned location such as
|
|
# /etc/livekit/livekit.yaml. Store only the generated key mapping in
|
|
# /etc/livekit/keys.yaml, owned by the livekit service user with mode 0600.
|
|
|
|
port: 7880
|
|
key_file: /etc/livekit/keys.yaml
|
|
|
|
rtc:
|
|
# These media ports must be reached directly by clients. Port 7880 is only
|
|
# for the same-host reverse proxy and must be denied by every public firewall.
|
|
udp_port: 7882
|
|
tcp_port: 0
|
|
allow_tcp_fallback: false
|
|
# Do not inherit LiveKit's public Google STUN defaults. This is the same
|
|
# deployment-owned STUN-only listener advertised to ordinary peer edges.
|
|
stun_servers:
|
|
- stun.example.com:3478
|
|
use_external_ip: true
|
|
|
|
room:
|
|
# Screener creates exact-generation rooms through the private RoomService API.
|
|
# Keep this false so a stale participant token cannot recreate a drained room.
|
|
auto_create: false
|
|
# Screener enforces its configured admission limit before issuing a token.
|
|
# This server-side ceiling covers the repository's 20 viewers plus one Host.
|
|
max_participants: 21
|
|
|
|
logging:
|
|
# Info-level join records include raw PublisherOffer SDP in LiveKit 1.13.5.
|
|
# Keep production at warn so credentials and media-path details stay out of
|
|
# the persistent journal; raise it only in an isolated, short-lived canary.
|
|
level: warn
|
|
pion_level: error
|
|
|
|
# External or embedded TURN, Redis, recording, ingress, egress, and webhooks are
|
|
# omitted on purpose. ICE/TCP fallback is explicitly disabled above. This
|
|
# candidate is one process on one node.
|