improve WebRTC NAT reliability diagnostics

k8s/deployment.yaml

@@ -36,6 +36,10 @@ spec:
           value: "stun:turn.k6n.net:3478,stun:stun.l.google.com:19302"
         - name: TURN_URLS
           value: "turn:turn.k6n.net:3478?transport=udp,turn:turn.k6n.net:3478?transport=tcp,turns:turn.k6n.net:5349?transport=tcp"
+        # Route media through the public coturn service. This avoids selecting
+        # direct/private candidates that fail across NATs or LAN hairpinning.
+        - name: ICE_TRANSPORT_POLICY
+          value: "relay"
         - name: TURN_SECRET
           valueFrom:
             secretKeyRef:
@@ -54,14 +58,6 @@ spec:
               name: coturn-auth
               key: password
               optional: true
-        - name: TURN_LAN_HOST
-          value: "10.10.3.46"
-        - name: TURN_LAN_SECRET
-          valueFrom:
-            secretKeyRef:
-              name: coturn-lan-secret
-              key: static-auth-secret
-              optional: true
         - name: OTEL_INGEST_KEY
           valueFrom:
             secretKeyRef: