From d17241378d5610bd07509f08343692c9a1ed4c79 Mon Sep 17 00:00:00 2001
From: jrodriiguezg <jrodriiguezg@jrodriiguezg.link>
Date: Sat, 15 Aug 2026 15:37:37 +0200
Subject: [PATCH] =?UTF-8?q?A=C3=B1adir=20jwt=5Fcompose.yaml?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 jwt_compose.yaml | 50 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)
 create mode 100644 jwt_compose.yaml

diff --git a/jwt_compose.yaml b/jwt_compose.yaml
new file mode 100644
index 0000000..3763ea2
--- /dev/null
+++ b/jwt_compose.yaml
@@ -0,0 +1,50 @@
+version: "3.8"
+
+# ==========================================================================
+# LiveKit (SFU de medios) + lk-jwt-service (autenticación Matrix <-> LiveKit)
+# Para habilitar llamadas de voz/vídeo (Element Call) en tu servidor Synapse
+# ==========================================================================
+
+services:
+
+  livekit:
+    image: livekit/livekit-server:latest
+    container_name: livekit
+    restart: unless-stopped
+    command: --config /etc/livekit.yaml
+    volumes:
+      # >>> CAMBIA esta ruta a tu disco duro <<<
+      - ./matrix/livekit/livekit.yaml:/etc/livekit.yaml:ro
+    ports:
+      # Puerto de señalización (WebSocket/HTTP) - va detrás de tu nginx
+      - "7880:7880"
+      # Puertos RTC (audio/vídeo real) - estos SÍ deben quedar expuestos
+      # directamente, no pueden ir detrás de un proxy nginx
+      - "7881:7881/tcp"
+      - "7882:7882/udp"
+    networks:
+      - rtc-net
+
+  lk-jwt-service:
+    image: ghcr.io/element-hq/lk-jwt-service:latest
+    container_name: lk-jwt-service
+    restart: unless-stopped
+    environment:
+      LK_JWT_PORT: "8080"
+      LIVEKIT_URL: "wss://rtc.example.com"   # >>> CAMBIA por tu subdominio real <<<
+      LIVEKIT_KEY: "matrix"                                   # >>> CAMBIA, debe coincidir con livekit.yaml <<<
+      LIVEKIT_SECRET: ""             # >>> CAMBIA, debe coincidir con livekit.yaml <<<
+      LIVEKIT_FULL_ACCESS_HOMESERVERS: "macarron.jrodriiguezg.link"
+      LIVEKIT_INSECURE_SKIP_VERIFY_TLS: "false"
+      LK_JWT_MATRIX_SERVER_URLS: "" 
+    depends_on:
+      - livekit
+    ports:
+      - "8083:8080"
+    networks:
+      - rtc-net
+
+networks:
+  rtc-net:
+    driver: bridge
+