mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-10 02:38:10 +02:00
- Introduced `COTURN_NETWORK_MODE` to support both host and bridge modes - Updated docker-compose template to skip port publishing in host mode - Changed user_password credential algorithm to random_hex for stronger randomness - Set default network_mode: host in config Ref: https://chatgpt.com/share/68d72a50-c36c-800f-9367-32c4ae520000
29 lines
1.6 KiB
YAML
29 lines
1.6 KiB
YAML
# General
|
|
application_id: "web-svc-coturn"
|
|
entity_name: "{{ application_id | get_entity_name }}"
|
|
domain: "{{ domains | get_domain(application_id) }}"
|
|
|
|
# Coturn
|
|
|
|
## Docker
|
|
COTURN_VERSION: "{{ applications | get_app_conf(application_id, 'docker.services.' ~ entity_name ~ '.version') }}"
|
|
COTURN_IMAGE: "{{ applications | get_app_conf(application_id, 'docker.services.' ~ entity_name ~ '.image') }}"
|
|
COTURN_VOLUME: "{{ entity_name }}"
|
|
COTURN_REALM: "{{ domain }}"
|
|
COTURN_NETWORK_MODE: "{{ applications | get_app_conf(application_id, 'docker.services.' ~ entity_name ~ '.network_mode') }}"
|
|
|
|
## Ports
|
|
COTURN_TURN_PORT: "{{ ports.public.turn[application_id] }}"
|
|
COTURN_STUN_PORT: "{{ ports.public.stun[application_id] }}"
|
|
COTURN_RELAY_PORT_START: "{{ ports.public.relay_port_ranges[application_id ~ '_start'] }}"
|
|
COTURN_RELAY_PORT_END: "{{ ports.public.relay_port_ranges[application_id ~ '_end' ] }}"
|
|
COTURN_RELAY_PORT_RANGE: "{{ COTURN_RELAY_PORT_START }}-{{ COTURN_RELAY_PORT_END }}"
|
|
|
|
## Credentials
|
|
COTURN_USER_NAME: "{{ applications | get_app_conf(application_id, 'username') }}"
|
|
COTURN_USER_PASSWORD: "{{ applications | get_app_conf(application_id, 'credentials.user_password') }}"
|
|
COTURN_STATIC_AUTH_SECRET: "{{ applications | get_app_conf(application_id, 'credentials.auth_secret') }}"
|
|
|
|
## Certificates
|
|
COTURN_TLS_CERT_PATH: "{{ [ LETSENCRYPT_LIVE_PATH, ssl_cert_folder, 'fullchain.pem' ] | path_join }}"
|
|
COTURN_TLS_KEY_PATH: "{{ [ LETSENCRYPT_LIVE_PATH, ssl_cert_folder, 'privkey.pem' ] | path_join }}" |