diff --git a/services/jitsi/deployment.yaml b/services/jitsi/deployment.yaml
index ff81b33..0bb9c51 100644
--- a/services/jitsi/deployment.yaml
+++ b/services/jitsi/deployment.yaml
@@ -5,7 +5,7 @@ metadata:
   name: jitsi-prosody
   namespace: jitsi
 spec:
-  replicas: 0
+  replicas: 1
   selector:
     matchLabels: { app: jitsi-prosody }
   template:
@@ -51,7 +51,7 @@ metadata:
   name: jitsi-jicofo
   namespace: jitsi
 spec:
-  replicas: 0
+  replicas: 1
   selector:
     matchLabels: { app: jitsi-jicofo }
   template:
@@ -90,7 +90,7 @@ metadata:
   name: jitsi-jvb
   namespace: jitsi
 spec:
-  replicas: 0
+  replicas: 1
   selector:
     matchLabels: { app: jitsi-jvb }
   template:
@@ -121,8 +121,8 @@ spec:
             - { name: ENABLE_COLIBRI_WEBSOCKET, value: "1" } # enables /colibri-ws
             # - { name: JVB_STUN_SERVERS, value: "stun.l.google.com:19302,stun1.l.google.com:19302,meet-jit-si-turnrelay.jitsi.net:443" }
             - { name: JVB_ENABLE_APIS, value: "rest,colibri" }
-            - { name: JVB_WS_DOMAIN, value: "meet.bstein.dev:443" }
-            - { name: JVB_WS_TLS,    value: "true" }
+            - { name: JVB_WS_DOMAIN, value: "meet.bstein.dev" }
+            - { name: JVB_WS_TLS,    value: "false" }        # TLS ends at Traefik; keep WS HTTP
             - { name: JVB_ADVERTISE_IPS, value: "38.28.125.112" }
             - { name: JVB_TCP_HARVESTER_DISABLED, value: "false" }
             - { name: JVB_TCP_PORT, value: "4443" }
@@ -140,7 +140,7 @@ metadata:
   name: jitsi-web
   namespace: jitsi
 spec:
-  replicas: 0
+  replicas: 1
   selector:
     matchLabels: { app: jitsi-web }
   template: