diff --git a/base/matrix/tuwunel-config.yaml b/base/matrix/tuwunel-config.yaml
index 5d52ed8..274a6be 100644
--- a/base/matrix/tuwunel-config.yaml
+++ b/base/matrix/tuwunel-config.yaml
@@ -37,7 +37,7 @@ data:
     [global.well_known]
     client = "https://messages.DOMAIN_SUFFIX"
     server = "messages.DOMAIN_SUFFIX:443"
-    livekit_url = "wss://livekit.DOMAIN_SUFFIX"
+    livekit_url = "https://livekit.DOMAIN_SUFFIX"
 
     # OIDC via Ory Hydra — identity_provider is configured entirely
     # via env vars because client_id/client_secret are injected from