This message was deleted.

With room composite egress, I believe you would need to host your own template and use the custom base url parameter

I only need track egress to a file/S3 bucket

Is egress running within the same vpc?

yes it is

I'm not sure whether it's possible with self signed certificates https://docs.livekit.io/oss/deployment/#domain,-ssl-certificates,-and-load-balancer

Egress uses livekit's Go SDK to connect to the room. It'll by default validate certs. You can disable this behavior by modifying the dialing behavior here to something like: https://github.com/livekit/server-sdk-go/blob/main/signalclient.go#L84

dialer := *websocket.DefaultDialer
	dialer.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}

then you'd have to recompile egress to get it to work. alternatively, you could use ws:// URLs without the self-signed SSL.

Fixed it 🙂! For future reference here it is: Egress uses the “debian way” of handling the root certificated. So, simply add the self sign root cert to

/usr/share/ca-certificates/

and run

sudo dpkg-reconfigure ca-certificates

and when the Egress connects to the livekit it should validate the certificate.

ah ha! that's great to know. Thanks for sharing @steep-painter-64729!