comms: move LiveKit media to UDP 443

services/communication/coturn.yaml

@@ -37,6 +37,9 @@ spec:
                 --no-cli \
                 --fingerprint \
                 --lt-cred-mech \
+                --listening-ip=0.0.0.0 \
+                --relay-ip="${POD_IP}" \
+                --external-ip="${TURN_PUBLIC_IP}/${POD_IP}" \
                 --user=livekit:"${TURN_STATIC_AUTH_SECRET}" \
                 --realm=live.bstein.dev \
                 --listening-port=3478 \
@@ -48,6 +51,12 @@ spec:
                 --log-file=stdout \
                 --no-software-attribute
           env:
+            - name: POD_IP
+              valueFrom:
+                fieldRef:
+                  fieldPath: status.podIP
+            - name: TURN_PUBLIC_IP
+              value: "38.28.125.112"
             - name: TURN_STATIC_AUTH_SECRET
               valueFrom:
                 secretKeyRef:

services/communication/livekit-config.yaml

@@ -7,8 +7,8 @@ data:
   livekit.yaml: |
     port: 7880
     rtc:
-      udp_port: 7882
-      tcp_port: 7881
+      udp_port: 443
+      tcp_port: 0
       use_external_ip: true
       turn_servers:
         - host: turn.live.bstein.dev

services/communication/livekit.yaml

@@ -65,10 +65,7 @@ spec:
             - containerPort: 7880
               name: http
               protocol: TCP
-            - containerPort: 7881
-              name: tcp-media
-              protocol: TCP
-            - containerPort: 7882
+            - containerPort: 443
               name: udp-media
               protocol: UDP
           volumeMounts:
@@ -110,11 +107,7 @@ spec:
       port: 7880
       targetPort: 7880
       protocol: TCP
-    - name: tcp-media
-      port: 7881
-      targetPort: 7881
-      protocol: TCP
     - name: udp-media
-      port: 7882
-      targetPort: 7882
+      port: 443
+      targetPort: 443
       protocol: UDP