Añadir jwt_compose.yaml

jwt_compose.yaml

@@ -0,0 +1,50 @@
+version: "3.8"
+
+# ==========================================================================
+# LiveKit (SFU de medios) + lk-jwt-service (autenticación Matrix <-> LiveKit)
+# Para habilitar llamadas de voz/vídeo (Element Call) en tu servidor Synapse
+# ==========================================================================
+
+services:
+
+  livekit:
+    image: livekit/livekit-server:latest
+    container_name: livekit
+    restart: unless-stopped
+    command: --config /etc/livekit.yaml
+    volumes:
+      # >>> CAMBIA esta ruta a tu disco duro <<<
+      - ./matrix/livekit/livekit.yaml:/etc/livekit.yaml:ro
+    ports:
+      # Puerto de señalización (WebSocket/HTTP) - va detrás de tu nginx
+      - "7880:7880"
+      # Puertos RTC (audio/vídeo real) - estos SÍ deben quedar expuestos
+      # directamente, no pueden ir detrás de un proxy nginx
+      - "7881:7881/tcp"
+      - "7882:7882/udp"
+    networks:
+      - rtc-net
+
+  lk-jwt-service:
+    image: ghcr.io/element-hq/lk-jwt-service:latest
+    container_name: lk-jwt-service
+    restart: unless-stopped
+    environment:
+      LK_JWT_PORT: "8080"
+      LIVEKIT_URL: "wss://rtc.example.com"   # >>> CAMBIA por tu subdominio real <<<
+      LIVEKIT_KEY: "matrix"                                   # >>> CAMBIA, debe coincidir con livekit.yaml <<<
+      LIVEKIT_SECRET: ""             # >>> CAMBIA, debe coincidir con livekit.yaml <<<
+      LIVEKIT_FULL_ACCESS_HOMESERVERS: "macarron.jrodriiguezg.link"
+      LIVEKIT_INSECURE_SKIP_VERIFY_TLS: "false"
+      LK_JWT_MATRIX_SERVER_URLS: "" 
+    depends_on:
+      - livekit
+    ports:
+      - "8083:8080"
+    networks:
+      - rtc-net
+
+networks:
+  rtc-net:
+    driver: bridge
+