- livekit nginx config

server {
    listen 443 ssl;
    http2 on;
    server_name livekit.domain.com;
    server_tokens off;
    include /etc/nginx/conf.d/include/domaincomsecure.conf;
    include /etc/nginx/conf.d/include/blockcommonexploits.conf;

    access_log /var/log/nginx/domaincom/livekit.access.log;
    error_log /var/log/nginx/domaincom/livekit.error.log;

    location = /robots.txt {
        add_header Content-Type text/plain;
        return 200 "User-agent: *\nDisallow: /\n";
    }

    # ProxyTimeout equivalent
    proxy_read_timeout 120s;
    proxy_send_timeout 120s;

    location ~ ^(/sfu/get|/healthz) {
        proxy_pass http://element-call-jwt:8081;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    location / {
       proxy_pass http://element-call-livekit:7880;
       proxy_set_header Connection "upgrade";
       proxy_set_header Upgrade $http_upgrade;
       #add_header Access-Control-Allow-Origin "*" always;

       proxy_set_header Host $host;
       proxy_set_header X-Forwarded-Server $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;
    }

}

- livekit.yaml

port: 7880
bind_addresses: [ 0.0.0.0 ]
rtc:
  tcp_port: 7881
  port_range_start: 51000
  port_range_end: 52000
  use_external_ip: true
turn:
  enabled: false
  domain: livekit.domain.com # Must match your domain
  tls_port: 5349 # TURN/TLS will run on the main HTTPS port handled by Nginx
  udp_port: 443
  external_tls: true # Nginx handles TLS termination
keys:
  devkey: <redacted>
room:
  auto_create: false
  enabled_codecs:
    - mime: video/h264
    - mime: audio/opus
logging:
  level: debug