mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

matrix-rtc: separate standalone publication from room creation

Browse source
This commit is contained in:
heather 2026-11-07 21:55:21 +00:00
commit 2ff4caa788
5 changed files with 321 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
hosts/heather/arion-compose.nix
View file

@ -187,7 +187,11 @@ in
service.ports = [ "127.0.0.1:7880:7880" "7881:7881/tcp" "7882:7882/udp" ];
};
matrix-rtc-jwt = {
service.image = "ghcr.io/element-hq/lk-jwt-service:0.9.0";
# Pinned-source policy fork: verified remote users may publish, but only
# iscg.dev may create SFU rooms. Source/tests/rollback: services/matrix-rtc-jwt.
service.image = "iscg/lk-jwt-service:0.9.0-policy1-6e21c58c02d6";
# Local test-gated image: restore/load it before starting on a new host.
out.service.pull_policy = "never";
service.container_name = "matrix-rtc-jwt";
# Avoid public-IP hairpin NAT for same-host OpenID and SFU calls; TLS stays verified.
out.service.extra_hosts = [ "iscg.dev:host-gateway" ];