Integrate LiveKit SFU and harden booking workflow

setup.sh

@@ -310,10 +310,9 @@ SMTP_PORT=587
 SMTP_USER=
 SMTP_PASSWORD=
 SMTP_FROM=
-STUN_SERVER=stun:stun.l.google.com:19302
-TURN_SERVER=
-TURN_USERNAME=
-TURN_PASSWORD=
+LIVEKIT_URL=
+LIVEKIT_API_KEY=
+LIVEKIT_API_SECRET=
 GOOGLE_SITE_VERIFICATION=
 DOCKER_NETWORK=anouma-network
 NPM_NETWORK=
@@ -353,6 +352,14 @@ else
   log_info "NEXT_PUBLIC_SERVER_URL bereits vorhanden — unverändert."
 fi
 
+if [ -z "$(env_get LIVEKIT_URL)" ]; then
+  BASE_DOMAIN="${DOMAIN:-$(env_get NEXT_PUBLIC_SERVER_URL | sed -E 's#^https?://([^/]+).*#\1#')}"
+  LIVEKIT_DOMAIN="$(ask "LiveKit-Domain (DNS + TLS-Reverse-Proxy nötig)" "livekit.${BASE_DOMAIN}" "LIVEKIT_DOMAIN")"
+  env_set LIVEKIT_URL "https://${LIVEKIT_DOMAIN}"
+fi
+env_ensure LIVEKIT_API_KEY "LK$(openssl rand -hex 12)" && log_info "LIVEKIT_API_KEY generiert." || log_info "LIVEKIT_API_KEY bereits vorhanden — unverändert."
+env_ensure LIVEKIT_API_SECRET "$(gen_secret)" && log_info "LIVEKIT_API_SECRET generiert." || log_info "LIVEKIT_API_SECRET bereits vorhanden — unverändert."
+
 if [ -z "$(env_get SMTP_HOST)" ]; then
   SETUP_SMTP="$(ask_yn "SMTP-Zugangsdaten jetzt eintragen? (sonst später manuell in .env)" "N")"
   if [ "$SETUP_SMTP" = true ]; then
@@ -437,6 +444,9 @@ echo "ANALYTICS_SALT_SECRET:  $(mask "$(env_get ANALYTICS_SALT_SECRET)")"
 echo "CRON_SECRET:            $(mask "$(env_get CRON_SECRET)")"
 echo "SMTP_HOST:              $(env_get SMTP_HOST)"
 echo "SMTP_PASSWORD:          $(mask "$(env_get SMTP_PASSWORD)")"
+echo "LIVEKIT_URL:            $(env_get LIVEKIT_URL)"
+echo "LIVEKIT_API_KEY:        $(mask "$(env_get LIVEKIT_API_KEY)")"
+echo "LIVEKIT_API_SECRET:     $(mask "$(env_get LIVEKIT_API_SECRET)")"
 echo "NPM_NETWORK:            $(env_get NPM_NETWORK)"
 echo "REGISTRY:               $(env_get REGISTRY)/$(env_get REGISTRY_REPO)"
 echo "REGISTRY_USERNAME:      $(env_get REGISTRY_USERNAME)"