From 720ab819fc7b278e9d79783507f02b3959339100 Mon Sep 17 00:00:00 2001
From: heather <heather@iscg.dev>
Date: Thu, 5 Nov 2026 20:02:25 +0000
Subject: [PATCH] heather: route MatrixRTC auth and signalling through Caddy

---
 hosts/heather/caddy.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/hosts/heather/caddy.nix b/hosts/heather/caddy.nix
index 5bea89a..a32ee3c 100644
--- a/hosts/heather/caddy.nix
+++ b/hosts/heather/caddy.nix
@@ -58,6 +58,13 @@ Allow: /" 200
 
       # Matrix tuwunel (homeserver)
       "iscg.dev".extraConfig = ''
+        # MatrixRTC signalling and auth share the existing TLS hostname.
+        handle_path /livekit/jwt/* {
+          reverse_proxy 127.0.0.1:8081
+        }
+        handle_path /livekit/sfu/* {
+          reverse_proxy 127.0.0.1:7880
+        }
         # Static file sharing (https://iscg.dev/files/<name>).
         # handle_path stripает /files/ prefix → file_server ищет в root.
         # Не конфликтует с matrix (использует /_matrix/*, /.well-known/matrix).