allow direct ICE with TURN fallback

k8s/deployment.yaml

@@ -36,10 +36,9 @@ spec:
           value: "stun:turn.k6n.net:3478,stun:stun.l.google.com:19302"
         - name: TURN_URLS
           value: "turn:turn.k6n.net:3478?transport=udp,turn:turn.k6n.net:3478?transport=tcp,turns:turn.k6n.net:5349?transport=tcp"
-        # Route media through the public coturn service. This avoids selecting
-        # direct/private candidates that fail across NATs or LAN hairpinning.
+        # Prefer direct/STUN paths where they work, with public TURN fallback.
         - name: ICE_TRANSPORT_POLICY
-          value: "relay"
+          value: "all"
         - name: TURN_SECRET
           valueFrom:
             secretKeyRef: