LotusGuild/matrix
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

docs(livekit): bind lk-jwt-service to 127.0.0.1:8071, not all interfaces (#24) #31

Merged
jared merged 1 commits from fix/lk-jwt-loopback into main 2026-10-18 19:45:48 -04:00
Conversation 0 Commits 1 Files Changed 1
+5 -3
1 Commits
Author SHA1 Message Date
Lotus CIandClaude Opus 5.5 076340227f docs(livekit): bind lk-jwt-service to 127.0.0.1:8071, not all interfaces (#24)
Lint / Shell (shellcheck) (pull_request) Successful in 19s
Details
Lint / JS (eslint) (pull_request) Successful in 16s
Details
Lint / No secrets in webhook configs (pull_request) Successful in 9s
Details
Lint / Landing page is rendered (matrix (pull_request) Successful in 5s
Details
Lint / Python (ruff) (pull_request) Successful in 5s
Details
Lint / Python deps (pip-audit) (pull_request) Successful in 38s
Details
Lint / Secret scan (gitleaks) (pull_request) Successful in 8s
Details
Lint / Shell (shellcheck) (push) Successful in 14s
Details
Lint / JS (eslint) (push) Successful in 9s
Details
Lint / No secrets in webhook configs (push) Successful in 4s
Details
Lint / Landing page is rendered (matrix (push) Successful in 4s
Details
Lint / Python (ruff) (push) Successful in 6s
Details
Lint / Python deps (pip-audit) (push) Successful in 40s
Details
Lint / Secret scan (gitleaks) (push) Successful in 7s
Details 
voice-limit-guard (:8070) is meant to be the only way to get a LiveKit
token, but lk-jwt-service bound :8071 on every interface, so any LAN
host could mint an unguarded token (no max_users, full publish sources
in audio-only rooms). The guard runs on the same LXC: document the
loopback bind in the setup steps and the port table.

Refs #24

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5
 2026-10-18 01:27:00 -04:00