619aba983e
Disable the broken LiveKit JWT Service container healthcheck
lk-jwt-service v0.6.0 ships a healthcheck which builds its URL as
http://localhost:$LIVEKIT_JWT_BIND/healthz , interpolating the bind
address into the port slot. We set LIVEKIT_JWT_BIND to ":8080", so the
check requests http://localhost::8080/healthz , which does not parse and
can never succeed. The container therefore sits permanently unhealthy,
Traefik skips unhealthy containers, and the service stops being routed,
so Element Call fails to obtain an SFU token.
No value satisfies both sides: the service passes LIVEKIT_JWT_BIND to
ListenAndServe, which needs a full bind address, while the healthcheck
needs a bare port. The check only works when the variable is unset and
its own "8080" fallback applies, which would mean ignoring a configured
port. Correcting the check from here is not possible either, as the
image is built FROM scratch and has no shell for a --health-cmd
override to use.
Turn the healthcheck off, behind a variable so it can be turned back on
once upstream fixes it. This restores the pre-v0.6.0 behavior, where the
image carried no healthcheck at all.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2日前
ddd99ba244
Point LiveKit JWT Service at our homeserver directly, instead of having it discover it
lk-jwt-service v0.6.0 stopped honoring the delay_cs_api_url request parameter
and now locates a user's Client-Server API by fetching the
/.well-known/matrix/client file of that user's base domain itself.
For our own homeserver, this makes the service leave the server over the
public network only to come back to it, which is wasteful at best and does
not work at all where the base domain is not reachable from the host.
Since we know where our homeserver is, we tell the service directly via the
new LIVEKIT_CS_API_URL_OVERRIDES environment variable. Federated homeservers
keep being resolved through discovery.
The service now also joins the container network that the homeserver's
Client-Server API is reachable on, like our other add-on services do.
It used to only be connected to it by coincidence, via the reverse-proxy
network, which left it unable to reach the homeserver when the playbook is
not managing Traefik.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2日前
4f00ad9bd4
Add support for additional volumes for the livekit-jwt-service component
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1ヶ月前
753f8ca7db
Support additional container arguments for matrix-livekit-jwt
2ヶ月前
bd6e08a93e
Allow host network mode for MDAD-managed containers ( #5310 )
* feat: support container_network=host across all roles + systemd templates
Mirror the pattern Slavi introduced for matrix-coturn (aafa8f0
2ヶ月前
64fc64921c
Upgrade livekit-jwt-service (v0.3.0 -> v0.4.0) and adapt configuration
Ref: https://github.com/element-hq/lk-jwt-service/releases/tag/v0.4.0
Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4784
8ヶ月前
0d56aa126c
Fix container name typo (`matrix-jwt-service` -> `matrix-livekit-jwt-service`) in `ExecStop`
1年前
d4c168daa9
Do not use `docker stop --time` (deprecated in Docker v28 in favor of `--timeout` or just `-t`)
1年前
e7d4bd4e28
Upgrade livekit-jwt-servie (0.2.3 -> 0.3.0) and make use of the new `LIVEKIT_FULL_ACCESS_HOMESERVERS` environment variable
Ref: https://github.com/element-hq/lk-jwt-service/releases/tag/v0.3.0
1年前
51ab9ed9ff
Adjust `lstrip_blocks` to use a `bool` value for compatibility with ansible-core>=2.19.0
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4445
1年前
9970603f15
Add Element Call support
This is an initial implementaton that's hasn't been battle-tested much.
Our LiveKit Server setup by default doesn't enable TURN, so connectivity
for NAT-ed clients may be subpar.
Squashed commit of the following:
commit d5c24fcafe4d61cc571b9c24064fb9a231a8159c24064fb6a757b515fbba9cedbed2a6b746acba9cedbeda4a638c2dff8f7ffc7d4a638c2df3155d5dad386b8a3fc8913ea1ea2f395dcaf6e23ea1ea2f34d3913a01560e2e035ad3913a015eac7f96806db8d800f6efhttps://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3562#issuecomment-2725250554
- f5f5374c4b/main.go (L135-L146)2c1c49444a6bc0185d58e883a5556bc0185d50https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3562#issuecomment-2720039742
commit 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
1年前
Slavi Pantaleev
Hollie Hutchinson
Kevin Veen-Birkenbach