From f1a5382413865564f79f0a38bdd7a3ac1f6249af Mon Sep 17 00:00:00 2001
From: grendervill <focuse@grandell.ru>
Date: Sat, 19 Sep 2026 20:41:37 +0300
Subject: [PATCH] =?UTF-8?q?fix(compose):=20=D0=BF=D1=83=D0=B1=D0=BB=D0=B8?=
 =?UTF-8?q?=D0=BA=D0=B0=D1=86=D0=B8=D1=8F=20=D0=BF=D0=BE=D1=80=D1=82=D0=BE?=
 =?UTF-8?q?=D0=B2=20TURN=20(3478/udp,=205349/tcp,=20=D0=B4=D0=B8=D0=B0?=
 =?UTF-8?q?=D0=BF=D0=B0=D0=B7=D0=BE=D0=BD=20=D1=80=D0=B5=D0=BB=D0=B5=D1=8F?=
 =?UTF-8?q?)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 deploy/compose.yaml.tpl | 6 ++++++
 deploy/install.sh       | 2 ++
 2 files changed, 8 insertions(+)

diff --git a/deploy/compose.yaml.tpl b/deploy/compose.yaml.tpl
index 11c7094..ed55ff0 100644
--- a/deploy/compose.yaml.tpl
+++ b/deploy/compose.yaml.tpl
@@ -69,6 +69,12 @@ services:
       # Медиапорты: тот же адрес привязки (для инстанса за NAT это адрес туннеля).
       - "${GLCHAT_LIVEKIT_BIND}:${LIVEKIT_TCP_PORT}:7881"
       - "${GLCHAT_LIVEKIT_BIND}:${LIVEKIT_UDP_PORT}:7882/udp"
+      # TURN: UDP и TURN/TLS. На хосте без белого IP эти порты доступны только
+      # из туннеля (внешний прокси/релей публикует их на своём адресе).
+      - "${GLCHAT_LIVEKIT_BIND}:${TURN_UDP_PORT}:${TURN_UDP_PORT}/udp"
+      - "${GLCHAT_LIVEKIT_BIND}:${TURN_TLS_PORT}:${TURN_TLS_PORT}/tcp"
+      # Диапазон релея TURN (медиа через relay).
+      - "${GLCHAT_LIVEKIT_BIND}:${TURN_RELAY_START}-${TURN_RELAY_END}:${TURN_RELAY_START}-${TURN_RELAY_END}/udp"
     volumes:
       - ./livekit/livekit.yaml:/etc/livekit.yaml:ro
       - ${GLCHAT_TURN_CERT_DIR}:/etc/certs:ro
diff --git a/deploy/install.sh b/deploy/install.sh
index 370683d..569a25e 100755
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -989,6 +989,8 @@ render_all_templates() {
         "GLCHAT_CADDY_PROFILE=${CADDY_PROFILE}" \
         "GLCHAT_TURN_CERT_DIR=${TURN_CERT_DIR}" \
         "GLCHAT_APP_BIND=${APP_BIND_ADDR}" "GLCHAT_LIVEKIT_BIND=${LIVEKIT_BIND_ADDR}" \
+        "TURN_UDP_PORT=${TURN_UDP_PORT}" "TURN_TLS_PORT=${TURN_TLS_PORT}" \
+        "TURN_RELAY_START=${TURN_RELAY_START}" "TURN_RELAY_END=${TURN_RELAY_END}" \
         "LIVEKIT_API_KEY=${LIVEKIT_API_KEY}" "LIVEKIT_API_SECRET=${LIVEKIT_API_SECRET}" \
         "HTTP_PORT=${HTTP_PORT}" "HTTPS_PORT=${HTTPS_PORT}"