From a16c53d9e495ae2a944437ceb8b3d47ec341e103 Mon Sep 17 00:00:00 2001
From: leo <260626284+cameledev@users.noreply.github.com>
Date: Wed, 2 Sep 2026 15:00:39 +0200
Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F(docker)=20upgrade=20LiveKit?=
 =?UTF-8?q?=20server=20to=20v1.13.6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The compose stack referenced livekit/livekit-server without a tag,
which resolved to :latest. Docker doesn't re-resolve a mutable tag it
already holds locally, so images earlier than v1.12.0 crashed
on startup:

    could not parse config: yaml: unmarshal errors:
      line 20: field allow_restricted_peer_cidrs not found in
      type config.TURNConfig

LiveKit parses its config in strict mode, and allow_restricted_peer_cidrs
only exists since v1.12.0. The TURN block added in bd81c994 therefore
carried an minimum version which was not reflected.

The Tilt/Helm stack builds its own image from docker/livekit/Dockerfile
to inject the mkcert root CA, and that was still based on v1.9.4. Bump
it to the same version so both dev stacks run the same server.
---
 CHANGELOG.md              | 4 ++++
 compose.yml               | 2 +-
 docker/livekit/Dockerfile | 2 +-
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0b9e9bfa..656c6304 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,10 @@ and this project adheres to
 
 ## [Unreleased]
 
+### Changed
+
+- ⬆️(docker) pin LiveKit server to v1.13.6
+
 ### Fixed
 
 - 🐛(frontend) keep the sending resolution picked while the camera is off #1667
diff --git a/compose.yml b/compose.yml
index e93d87b4..566a42da 100644
--- a/compose.yml
+++ b/compose.yml
@@ -207,7 +207,7 @@ services:
       - kc_postgresql
 
   livekit:
-    image: livekit/livekit-server
+    image: livekit/livekit-server:v1.13.6
     entrypoint: /livekit-server --dev --bind 0.0.0.0 --config ./config.yaml
     ports:
       - "7880:7880"
diff --git a/docker/livekit/Dockerfile b/docker/livekit/Dockerfile
index 789aff1b..09d998b4 100644
--- a/docker/livekit/Dockerfile
+++ b/docker/livekit/Dockerfile
@@ -1,4 +1,4 @@
-FROM livekit/livekit-server:v1.9.4
+FROM livekit/livekit-server:v1.13.6
 
 # We inject the nip.io certificate manually because the livekit chart doesn't support volume mounting
 COPY rootCA.pem /etc/ssl/certs/