Huge role refactoring/cleanup. Other commits will propably follow. Because some bugs will exist. Still important for longrun and also for auto docs/help/slideshow generation

roles/web-app-coturn/README.md

@@ -0,0 +1,9 @@
+# Coturn Server (DRAFT)
+setup an coturn server based on https://hub.docker.com/r/coturn/coturn
+
+## todo
+
+Needs to be implemented so that Nextcloud Talk works
+
+## author 
+[Kevin Veen-Birkenbach](https://www.veen.world)

roles/web-app-coturn/TODO.md

@@ -0,0 +1,2 @@
+# Todo
+- Implement this role

roles/web-app-coturn/tasks/main.yml

@@ -0,0 +1,11 @@
+---
+- name: "include service-rdbms-central"
+  include_role: 
+    name: service-rdbms-central
+
+- name: "include role webserver-proxy-domain for {{application_id}}"
+  include_role:
+    name: webserver-proxy-domain
+  vars:
+    domain:   "{{ domains | get_domain(application_id) }}"
+    http_port:   "{{ ports.localhost.http[application_id] }}"

roles/web-app-coturn/templates/docker-compose.yml.j2

@@ -0,0 +1,63 @@
+{% include 'roles/docker-compose/templates/base.yml.j2' %}
+  application:
+{% include 'roles/docker-container/templates/base.yml.j2' %}
+    image: "gitea/gitea:{{applications.gitea.version}}"
+    ports:
+      - "127.0.0.1:{{ports.localhost.http[application_id]}}:{{ container_port }}"
+      - "{{ports.public.ssh[application_id]}}:22"
+    volumes:
+      - data:/data
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+{% include 'roles/docker-container/templates/healthcheck/curl.yml.j2' %}
+
+{% include 'roles/docker-container/templates/networks.yml.j2' %}
+{% include 'roles/docker-container/templates/depends_on/dmbs_excl.yml.j2' %}
+
+{% include 'roles/docker-compose/templates/volumes.yml.j2' %}
+  data:
+
+{% include 'roles/docker-compose/templates/networks.yml.j2' %}
+  coturn:
+    image: coturn/coturn
+    restart: always
+    network_mode: "host"  # Nutzt die Host-IP für externe Erreichbarkeit (optional)
+    ports:
+      - "3478:3478/udp"
+      - "3478:3478/tcp"
+      - "5349:5349/tcp"
+      - "5349:5349/udp"
+      - "49152-65535:49152-65535/udp"  # TURN-Relay-Ports (wichtig!)
+    #volumes:                         # In case customized config is required
+    #   - coturn-config:/etc/coturn
+    environment:
+      - TURN_PORT=3478
+      - TURN_PORT_TLS=5349
+      - TURN_SECRET=my-secret-key
+      - TURN_USER=turnuser
+      - TURN_PASSWORD=turnpassword
+    command: >
+      --log-file=stdout
+      --external-ip=$(detect-external-ip)
+      --lt-cred-mech
+      --user=turnuser:turnpassword
+      --realm=nextcloud
+      --total-quota=100
+      --stale-nonce
+      --no-multicast-peers
+      --denied-peer-ip=0.0.0.0-0.255.255.255
+      --denied-peer-ip=10.0.0.0-10.255.255.255
+      --denied-peer-ip=100.64.0.0-100.127.255.255
+      --denied-peer-ip=169.254.0.0-169.254.255.255
+      --denied-peer-ip=172.16.0.0-172.31.255.255
+      --denied-peer-ip=192.0.0.0-192.0.0.255
+      --denied-peer-ip=192.88.99.0-192.88.99.255
+      --denied-peer-ip=192.168.0.0-192.168.255.255
+      --denied-peer-ip=198.18.0.0-198.19.255.255
+      --denied-peer-ip=198.51.100.0-198.51.100.255
+      --denied-peer-ip=203.0.113.0-203.0.113.255
+      --denied-peer-ip=240.0.0.0-255.255.255.255
+
+volumes:
+  nextcloud:
+  coturn-config:

roles/web-app-coturn/vars/configuration.yml.j2

@@ -0,0 +1,2 @@
+user:         turnuser
+credentials:  

roles/web-app-coturn/vars/main.yml

@@ -0,0 +1,3 @@
+application_id:     "coturn"
+container_port:   3000
+#database_type:      "mariadb"