mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-12-02 15:39:57 +00:00
Kevin Veen-Birkenbach
e09f561f0b
- Replace legacy utils/run_once.yml with the new helpers utils/once_flag.yml and utils/once_finalize.yml - Introduce utils/compose_up.yml to ensure docker-compose stacks are up and to flush handlers safely without coupling to run-once flags - Migrate all affected roles (desk-*, dev-*, sys-ctl-*, sys-svc-*, web-app-*, web-svc-*, util-*) to the new run-once helpers - Rework sys-svc-msmtp to auto-load Mailu once per deploy, check reachability, and reuse the running stack instead of requiring multiple playbook passes - Adjust web-app-mailu to integrate cert deployment, handler flushing, and run-once handling so Mailu is fully initialized in a single deploy - Improve Matomo, CDN, logout and CSP/health-check related roles to cooperate with the new compose_up / once_* pattern - Simplify alarm/backup/timer/service orchestration (sys-ctl-alm-*, sys-bkp-provider, sys-timer-cln-bkps, etc.) by moving run-once logic into dedicated 01_core.yml files - Update integration tests so utils/once_flag.yml and utils/once_finalize.yml are recognised as valid run-once providers, keeping the global run_once_* guarantees consistent - Align frontend injection and service dependencies so Mastodon- and Mailu-related services can be brought up coherently within a single deployment cycle rather than several iterations
Coturn
This folder contains the role to deploy and manage a Coturn service.
Description
Coturn is a free and open-source TURN (Traversal Using Relays around NAT) and STUN (Session Traversal Utilities for NAT) server.
It enables real-time communication (RTC) applications such as WebRTC to work reliably across NATs and firewalls.
Without TURN/STUN, video calls, conferencing, and peer-to-peer connections often fail due to NAT traversal issues.
Coturn solves this by acting as a relay server and/or discovery service for public IP addresses.
More background:
- Wikipedia: Traversal Using Relays around NAT
- Wikipedia: Session Traversal Utilities for NAT
- Official Coturn Docs: https://github.com/coturn/coturn/wiki
Overview
This role deploys Coturn via Docker Compose using the sys-stk-semi-stateless stack.
It automatically configures:
- TURN and STUN listening ports
- Relay port ranges
- TLS certificates (via Let’s Encrypt integration)
- Long-term credentials and/or REST API secrets
Typical use cases:
- Nextcloud Talk
- Jitsi
- BigBlueButton
- Any WebRTC-based application
Features
- Stateless container deployment (no database or persistent volume required)
- Automatic TLS handling via
sys-stk-front-base - TURN and STUN support over TCP and UDP
- Configurable relay port ranges for scaling
- Integration into Infinito.Nexus inventory/variable system
Further Resources
- Coturn Project — https://github.com/coturn/coturn
- Coturn Wiki — https://github.com/coturn/coturn/wiki
- TURN on Wikipedia — https://en.wikipedia.org/wiki/Traversal_Using_Relays_around_NAT
- STUN on Wikipedia — https://en.wikipedia.org/wiki/STUN