Files
computer-playbook/roles/web-svc-coturn
Kevin Veen-Birkenbach 73a38e0b2b Refactor TURN/STUN handling:
- Split internal/external Coturn for BBB and Nextcloud
- Added dedicated relay port ranges per app
- Updated env and compose overrides for coturn
- Ensure coturn role is loaded conditionally
- Standardize credential/env passing for coturn
@See https://chatgpt.com/share/68d6f376-4878-800f-b4f7-62822caa49ea
2025-09-26 22:11:55 +02:00
..
2025-09-26 22:11:55 +02:00
2025-09-26 22:11:55 +02:00
2025-09-26 22:11:55 +02:00
2025-09-26 22:11:55 +02:00

Coturn

This folder contains the role to deploy and manage a Coturn service.

Description

Coturn is a free and open-source TURN (Traversal Using Relays around NAT) and STUN (Session Traversal Utilities for NAT) server.
It enables real-time communication (RTC) applications such as WebRTC to work reliably across NATs and firewalls.

Without TURN/STUN, video calls, conferencing, and peer-to-peer connections often fail due to NAT traversal issues.
Coturn solves this by acting as a relay server and/or discovery service for public IP addresses.

More background:

Overview

This role deploys Coturn via Docker Compose using the sys-stk-semi-stateless stack.
It automatically configures:

  • TURN and STUN listening ports
  • Relay port ranges
  • TLS certificates (via Lets Encrypt integration)
  • Long-term credentials and/or REST API secrets

Typical use cases:

  • Nextcloud Talk
  • Jitsi
  • BigBlueButton
  • Any WebRTC-based application

Features

  • Stateless container deployment (no database or persistent volume required)
  • Automatic TLS handling via sys-stk-front-base
  • TURN and STUN support over TCP and UDP
  • Configurable relay port ranges for scaling
  • Integration into Infinito.Nexus inventory/variable system

Further Resources