From 10f7f3a8c666484c5c3e2cb9b4cbf347ed151d38 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 1 Jan 2026 03:54:19 -0300
Subject: [PATCH] communication: advertise TURN over tcp

---
 services/communication/livekit-config.yaml | 3 +++
 services/communication/livekit.yaml        | 9 ++++++++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/services/communication/livekit-config.yaml b/services/communication/livekit-config.yaml
index 7e3d981..107271c 100644
--- a/services/communication/livekit-config.yaml
+++ b/services/communication/livekit-config.yaml
@@ -14,6 +14,9 @@ data:
         - host: turn.live.bstein.dev
           port: 5349
           protocol: tls
+        - host: turn.live.bstein.dev
+          port: 3478
+          protocol: tcp
         - host: turn.live.bstein.dev
           port: 3478
           protocol: udp
diff --git a/services/communication/livekit.yaml b/services/communication/livekit.yaml
index ad7f441..c821cb4 100644
--- a/services/communication/livekit.yaml
+++ b/services/communication/livekit.yaml
@@ -13,7 +13,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: livekit-config-v3
+        checksum/config: livekit-config-v4
       labels:
         app: livekit
     spec:
@@ -63,6 +63,13 @@ spec:
                 secretKeyRef:
                   name: turn-shared-secret
                   key: TURN_STATIC_AUTH_SECRET
+            - name: LIVEKIT_RTC__TURN_SERVERS_2__USERNAME
+              value: livekit
+            - name: LIVEKIT_RTC__TURN_SERVERS_2__CREDENTIAL
+              valueFrom:
+                secretKeyRef:
+                  name: turn-shared-secret
+                  key: TURN_STATIC_AUTH_SECRET
           ports:
             - containerPort: 7880
               name: http