# Upgrade Guide
This document provides instructions for upgrading WorkAdventure between versions.
## Upgrading from v1.27.2 to v1.27.3
### TURN Credentials Architecture Change (BREAKING CHANGE)
Version 1.27.3 introduces a significant architectural change in how TURN credentials are managed. The TURN credentials generation has been moved from the `back` service to the `play` service (pusher component).
#### Migration Steps
##### For Docker Compose Deployments
If you are using `contrib/docker/docker-compose.prod.yaml` or a similar Docker Compose setup:
1. **Locate your `TURN_STATIC_AUTH_SECRET` configuration**
In your `.env` file or environment configuration, you should have:
```bash
TURN_STATIC_AUTH_SECRET=your-secret-here
-
Update your docker-compose configuration
Before (v1.27.2 and earlier):
services: play: environment: - TURN_SERVER - TURN_USER - TURN_PASSWORD # TURN_STATIC_AUTH_SECRET was NOT here - STUN_SERVER back: environment: - TURN_SERVER - TURN_USER - TURN_PASSWORD - TURN_STATIC_AUTH_SECRET # ← Was configured here - STUN_SERVER
After (v1.27.3 and later):
services: play: environment: - TURN_SERVER - TURN_USER - TURN_PASSWORD - TURN_STATIC_AUTH_SECRET # ← Now configured here - STUN_SERVER back: environment: - TURN_SERVER - TURN_USER - TURN_PASSWORD # TURN_STATIC_AUTH_SECRET removed from back - STUN_SERVER
-
Keep your
.envfile unchangedYour
.envfile does not need to be modified. TheTURN_STATIC_AUTH_SECRETvalue remains the same:TURN_STATIC_AUTH_SECRET=your-secret-here
-
Restart your services
After updating your docker-compose configuration:
docker-compose down docker-compose up -d
If you are using Kubernetes, Helm, or another deployment method:
-
Remove
TURN_STATIC_AUTH_SECRETfrom the back service- Remove the environment variable from your back service/deployment configuration
-
Add
TURN_STATIC_AUTH_SECRETto the play service- Add the environment variable to your play service/deployment configuration
- Use the same secret value you were using previously
-
Redeploy both services
- Deploy the updated back service configuration
- Deploy the updated play service configuration
After upgrading, verify that TURN credentials are working correctly:
- Open your WorkAdventure instance in a browser
- Join a room with another user
- Enable video/audio communication
- Check the browser console for any WebRTC-related errors
- Verify that peer-to-peer connections are established successfully
If you see errors related to TURN credentials or ICE servers, double-check that:
- The
TURN_STATIC_AUTH_SECRETis present in theplayservice environment - The
TURN_SERVERconfiguration is correct - The play service has been restarted after the configuration change
For more details about this change, see: