From cb793c7ab6f72eb7706b56976c1cd5edaf937ae3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mats=20T=C3=B6rnberg?= <mats@tornberg.me>
Date: Tue, 22 Sep 2026 16:49:40 +0200
Subject: [PATCH] allow direct ICE with TURN fallback

---
 k8s/deployment.yaml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
index bfd8686..a289a2e 100644
--- a/k8s/deployment.yaml
+++ b/k8s/deployment.yaml
@@ -36,10 +36,9 @@ spec:
           value: "stun:turn.k6n.net:3478,stun:stun.l.google.com:19302"
         - name: TURN_URLS
           value: "turn:turn.k6n.net:3478?transport=udp,turn:turn.k6n.net:3478?transport=tcp,turns:turn.k6n.net:5349?transport=tcp"
-        # Route media through the public coturn service. This avoids selecting
-        # direct/private candidates that fail across NATs or LAN hairpinning.
+        # Prefer direct/STUN paths where they work, with public TURN fallback.
         - name: ICE_TRANSPORT_POLICY
-          value: "relay"
+          value: "all"
         - name: TURN_SECRET
           valueFrom:
             secretKeyRef: