mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-10 02:38:10 +02:00
Kevin Veen-Birkenbach
3cc4014edf
- registered subnet 192.168.104.48/28 for coturn in group_vars/all/09_networks.yml - defined public ports for stun/turn and relay port range in group_vars/all/10_ports.yml - removed obsolete TODO.md and env.j2 from role - added schema/main.yml with credentials validation (user_password, auth_secret) - refactored tasks to load sys-stk-back-stateless instead of sys-stk-full-stateful - implemented docker-compose.yml.j2 with auth-secret + lt-cred-mech and TLS config - restructured vars/main.yml with docker, ports, credentials, and certificates - updated config/main.yml.j2 with canonical domain and service definitions Conversation: https://chatgpt.com/share/68d6c4a8-d524-800f-9592-e8a3407cd721
40 lines
1.4 KiB
Django/Jinja
40 lines
1.4 KiB
Django/Jinja
{% include 'roles/docker-compose/templates/base.yml.j2' %}
|
|
|
|
coturn:
|
|
{% include 'roles/docker-container/templates/base.yml.j2' %}
|
|
image: {{ COTURN_IMAGE }}:{{ COTURN_VERSION }}
|
|
container_name: {{ COTURN_VOLUME }}
|
|
{% include 'roles/docker-container/templates/base.yml.j2' %}
|
|
ports:
|
|
- "{{ COTURN_TURN_PORT }}:{{ COTURN_TURN_PORT }}/udp"
|
|
- "{{ COTURN_TURN_PORT }}:{{ COTURN_TURN_PORT }}/tcp"
|
|
- "{{ COTURN_STUN_PORT }}:{{ COTURN_STUN_PORT }}/tcp"
|
|
- "{{ COTURN_STUN_PORT }}:{{ COTURN_STUN_PORT }}/udp"
|
|
- "{{ COTURN_RELAY_PORT_RANGE }}/udp"
|
|
command: >
|
|
--use-auth-secret
|
|
--static-auth-secret={{ COTURN_STATIC_AUTH_SECRET }}
|
|
--lt-cred-mech
|
|
--user={{ COTURN_USER_NAME }}:{{ COTURN_USER_PASSWORD }}
|
|
--log-file=stdout
|
|
--external-ip={{ networks.internet.ip4 }}
|
|
{% if networks.internet.ip6|default('') %}
|
|
--external-ip={{ networks.internet.ip6 }}
|
|
{% endif %}
|
|
--realm={{ COTURN_REALM }}
|
|
--fingerprint
|
|
--total-quota=100
|
|
--stale-nonce
|
|
--no-multicast-peers
|
|
--no-cli
|
|
--no-tcp-relay
|
|
--min-port={{ COTURN_RELAY_PORT_START }}
|
|
--max-port={{ COTURN_RELAY_PORT_END }}
|
|
--cert={{ COTURN_TLS_CERT_PATH }}
|
|
--pkey={{ COTURN_TLS_KEY_PATH }}
|
|
--cipher-list=DEFAULT
|
|
--dh2066
|
|
{% include 'roles/docker-container/templates/networks.yml.j2' %}
|
|
|
|
{% include 'roles/docker-compose/templates/networks.yml.j2' %}
|