kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-10-10 10:48:10 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
c06d1c4d1726e447b825b8d1047d503f7cd6854a
computer-playbook/roles/web-svc-coturn
History
Kevin Veen-Birkenbach dbbb3510f3 Refactor TURN/STUN config: 
- Removed ?transport=udp from Nextcloud Talk TURN server definitions
- Dropped --no-tcp-relay to allow TCP fallback
- Removed invalid UDP mapping on TLS port
- Introduced switch between REST secret auth and lt-cred-mech via COTURN_USER_AUTH_ENABLED
- Added user_auth_enabled flag in coturn config for flexibility

See: https://chatgpt.com/share/68d7d601-3558-800f-bc84-00d7e8fc3243
2025-09-27 14:18:29 +02:00
..
config
Refactor TURN/STUN config:
2025-09-27 14:18:29 +02:00
meta
refactor(front-stack): introduce sys-stk-front-base and semi-stateless stack; improve coturn role docs
2025-09-26 20:25:53 +02:00
schema
feat(web-svc-coturn): add configurable network_mode (default host) and adjust credential generation
2025-09-27 02:05:48 +02:00
tasks
web-svc-coturn: Add resource limits and fix docker-compose template
2025-09-27 01:40:37 +02:00
templates
Refactor TURN/STUN config:
2025-09-27 14:18:29 +02:00
vars
Refactor TURN/STUN config:
2025-09-27 14:18:29 +02:00
README.md
refactor(front-stack): introduce sys-stk-front-base and semi-stateless stack; improve coturn role docs
2025-09-26 20:25:53 +02:00

README.md

Coturn

This folder contains the role to deploy and manage a Coturn service.

Description

Coturn is a free and open-source TURN (Traversal Using Relays around NAT) and STUN (Session Traversal Utilities for NAT) server.
It enables real-time communication (RTC) applications such as WebRTC to work reliably across NATs and firewalls.

Without TURN/STUN, video calls, conferencing, and peer-to-peer connections often fail due to NAT traversal issues.
Coturn solves this by acting as a relay server and/or discovery service for public IP addresses.

More background:

Overview

This role deploys Coturn via Docker Compose using the sys-stk-semi-stateless stack.
It automatically configures:

  • TURN and STUN listening ports
  • Relay port ranges
  • TLS certificates (via Let’s Encrypt integration)
  • Long-term credentials and/or REST API secrets

Typical use cases:

  • Nextcloud Talk
  • Jitsi
  • BigBlueButton
  • Any WebRTC-based application

Features

  • Stateless container deployment (no database or persistent volume required)
  • Automatic TLS handling via sys-stk-front-base
  • TURN and STUN support over TCP and UDP
  • Configurable relay port ranges for scaling
  • Integration into Infinito.Nexus inventory/variable system

Further Resources