mirror of
https://github.com/livekit/livekit.git
synced 2026-10-23 10:52:46 +00:00
turn_servers already accepts secret_file for the dynamic (static-auth-secret) mechanism, but the static username/credential pair could only be written inline in the config, forcing deployments that mount secrets as files to inline them. Add username_file and credential_file, resolved through a single helper shared with secret_file: the inline value wins when both are set, file contents are trimmed, an empty file fails startup, and credential_file must not be readable by others. username_file carries no permission requirement because the username is not a secret. Co-authored-by: Ora Agent <noreply@oratelecom.net>