mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5.5
045ef095f2
The LiveKit JWT service checks each OpenID token over federation against the user's homeserver. Server discovery found no delegation: https://<server_name>/.well-known/matrix/server hit the redirect vhost of web-opt-rdr-domains, which answered 301 to the dashboard and then 404, so the lookup fell back to <server_name>:8448. In compose OpenResty runs in the host network and answers there; in swarm it publishes 80 and 443 only, the dial was refused and Element Call's token exchange returned 401 M_UNAUTHORIZED (main run 40017166046, Nextcloud#12). The role also wrote the delegation to `<well-known>/matrixserver`, because the file path joined the directory and `server` without a separator. The file now lands at `<well-known>/matrix/server`, and the redirect vhost serves `/.well-known/matrix/` from the shared well-known directory, so discovery delegates to the Synapse domain on 443 in both modes. Both flavors share tasks/utils/well_known.yml, which also includes web-opt-rdr-domains for the server name when no play-wide redirect claims it, so the delegation has a vhost there too. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>