mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-10 02:38:10 +02:00
Kevin Veen-Birkenbach
dbbb3510f3
- Removed ?transport=udp from Nextcloud Talk TURN server definitions - Dropped --no-tcp-relay to allow TCP fallback - Removed invalid UDP mapping on TLS port - Introduced switch between REST secret auth and lt-cred-mech via COTURN_USER_AUTH_ENABLED - Added user_auth_enabled flag in coturn config for flexibility See: https://chatgpt.com/share/68d7d601-3558-800f-bc84-00d7e8fc3243
53 lines
2.0 KiB
Django/Jinja
53 lines
2.0 KiB
Django/Jinja
{% include 'roles/docker-compose/templates/base.yml.j2' %}
|
|
|
|
coturn:
|
|
{% include 'roles/docker-container/templates/base.yml.j2' %}
|
|
image: {{ COTURN_IMAGE }}:{{ COTURN_VERSION }}
|
|
container_name: {{ COTURN_VOLUME }}
|
|
network_mode: {{ COTURN_NETWORK_MODE }}
|
|
{% if COTURN_NETWORK_MODE == 'bridge' %}
|
|
ports:
|
|
- "{{ COTURN_STUN_TURN_PORT }}:{{ COTURN_STUN_TURN_PORT }}/udp"
|
|
- "{{ COTURN_STUN_TURN_PORT }}:{{ COTURN_STUN_TURN_PORT }}/tcp"
|
|
- "{{ COTURN_STUN_TURN_PORT_TLS }}:{{ COTURN_STUN_TURN_PORT_TLS }}/tcp"
|
|
- "{{ COTURN_RELAY_PORT_RANGE }}/udp"
|
|
{% include 'roles/docker-container/templates/networks.yml.j2' %}
|
|
{% endif %}
|
|
volumes:
|
|
- "{{ COTURN_TLS_CERT_PATH }}:{{ COTURN_TLS_CERT_PATH }}:ro"
|
|
- "{{ COTURN_TLS_KEY_PATH }}:{{ COTURN_TLS_KEY_PATH }}:ro"
|
|
command: >
|
|
{% if COTURN_USER_AUTH_ENABLED | bool %}
|
|
--lt-cred-mech
|
|
--user="${COTURN_USER_NAME}:${COTURN_USER_PASSWORD}"
|
|
{% else %}
|
|
--use-auth-secret
|
|
--static-auth-secret="${COTURN_STATIC_AUTH_SECRET}"
|
|
{% endif %}
|
|
--log-file=stdout
|
|
--external-ip={{ networks.internet.ip4 }}
|
|
{% if networks.internet.ip6|default('') %}
|
|
--external-ip={{ networks.internet.ip6 }}
|
|
{% endif %}
|
|
--realm="${COTURN_REALM}"
|
|
--fingerprint
|
|
--total-quota=100
|
|
--stale-nonce
|
|
--no-multicast-peers
|
|
--no-cli
|
|
--listening-port={{ COTURN_STUN_TURN_PORT }}
|
|
--tls-listening-port={{ COTURN_STUN_TURN_PORT_TLS }}
|
|
--min-port={{ COTURN_RELAY_PORT_START }}
|
|
--max-port={{ COTURN_RELAY_PORT_END }}
|
|
--cert={{ COTURN_TLS_CERT_PATH }}
|
|
--pkey={{ COTURN_TLS_KEY_PATH }}
|
|
--cipher-list=DEFAULT
|
|
healthcheck:
|
|
test: ["CMD", "sh", "-c", "command -v turnutils_stunclient >/dev/null && turnutils_stunclient -p {{ COTURN_STUN_TURN_PORT }} 127.0.0.1 || nc -z 127.0.0.1 {{ COTURN_STUN_TURN_PORT }}"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
{% include 'roles/docker-compose/templates/networks.yml.j2' %}
|
|
|