Register GIS LiveKit as docker compose on webservers.

Same deploy path as abc_worker: host_apps on adama/starbuck/etc., NPM for wss://. UDP/7881 still forwarded to one upstream host.

inventory/group_vars/all.yml

@@ -12,6 +12,15 @@ ufw_allowed_tcp_ports:
   - 80
   - 443
 
+# LiveKit on webservers. Signaling stays LAN (NPM → :7880). UDP must be
+# reachable from the internet via router DNAT to the NPM upstream host.
+ufw_lan_tcp_ports:
+  - 7880
+  - 7881
+ufw_extra_udp_ports:
+  - 3478
+  - "50000:60000"
+
 # Docker
 docker_users:
   - "{{ admin_user }}"
@@ -167,6 +176,14 @@ app_catalog:
     repo: "{{ git_base_url }}/GIS/abc_fe.git"
     default_branch: master
     webroot_pattern: "/var/www/{env}.abc.aimloperations/html"
+  livekit:
+    type: django
+    repo: "{{ git_base_url }}/GIS/livekit.git"
+    default_branch: master
+    compose_file: docker-compose.prod.yml
+    web_service: web
+    # SFU — no Django migrations. `true` keeps the django deploy path happy.
+    migrate_cmd: "true"
 
 # Deploy filter vars. CI passes these; manual runs may leave them undefined
 # to (re)deploy every app listed in the host's host_apps.

inventory/host_vars/adama.yml

@@ -31,3 +31,4 @@ host_apps:
   - { name: abc_be, env: beta, port: 8017 }
   - { name: abc_worker, env: beta, port: 8018 }
   - { name: abc_fe, env: beta, port: 8085 }
+  - { name: livekit, env: beta, port: 7880 }

inventory/host_vars/ai-server-4080.yml

@@ -47,4 +47,5 @@ host_apps:
   - { name: print_forge, env: beta, port: 8019 }
   - { name: abc_be, env: beta, port: 8017 }
   - { name: abc_worker, env: beta, port: 8018 }
-  - { name: abc_fe, env: beta, port: 8085 }
+  - { name: abc_fe, env: beta, port: 8085 }
+  - { name: livekit, env: beta, port: 7880 }

inventory/host_vars/apollo.yml

@@ -27,3 +27,4 @@ host_apps:
   - { name: abc_be, env: beta, port: 8017 }
   - { name: abc_worker, env: beta, port: 8018 }
   - { name: abc_fe, env: beta, port: 8085 }
+  - { name: livekit, env: beta, port: 7880 }

inventory/host_vars/roslin.yml

@@ -27,3 +27,4 @@ host_apps:
   - { name: abc_be, env: beta, port: 8017 }
   - { name: abc_worker, env: beta, port: 8018 }
   - { name: abc_fe, env: beta, port: 8085 }
+  - { name: livekit, env: beta, port: 7880 }

inventory/host_vars/starbuck.yml

@@ -27,3 +27,4 @@ host_apps:
   - { name: abc_be, env: beta, port: 8017 }
   - { name: abc_worker, env: beta, port: 8018 }
   - { name: abc_fe, env: beta, port: 8085 }
+  - { name: livekit, env: beta, port: 7880 }