mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-10 10:48:10 +02:00
Kevin Veen-Birkenbach
a044028e03
- Replace inline get_app_conf secrets in env.j2 with dedicated vars (TURN, signaling, internal)
- Correctly model signaling_servers as object {servers, secret} in spreed.yml
- Use UDP stun_turn port instead of TLS for transport=udp
- Add fallback logic for standalone Coturn role in main.yml
- Remove obsolete Greenlight section from BBB override
Ref: https://chatgpt.com/share/68d74e25-c068-800f-ae20-d0e34ac8ee12
42 lines
1.1 KiB
Django/Jinja
42 lines
1.1 KiB
Django/Jinja
services:
|
|
webrtc-sfu:
|
|
environment:
|
|
MS_WORKERS: "1"
|
|
MS_ENABLE_IPV6: "false"
|
|
MS_WEBRTC_LISTEN_IPS: >-
|
|
[{"ip":"0.0.0.0","announcedIp":"${EXTERNAL_IPv4}"}]
|
|
{% if BBB_COTURN_ENABLED | bool %}
|
|
coturn:
|
|
ports:
|
|
- "{{ BBB_TURN_PORT }}:{{ BBB_TURN_PORT }}/udp"
|
|
- "{{ BBB_TURN_PORT }}:{{ BBB_TURN_PORT }}/tcp"
|
|
- "{{ BBB_STUN_PORT }}:{{ BBB_STUN_PORT }}/udp"
|
|
- "{{ BBB_STUN_PORT }}:{{ BBB_STUN_PORT }}/tcp"
|
|
- "{{ BBB_RELAY_PORT_RANGE }}/udp"
|
|
command: >-
|
|
--use-auth-secret
|
|
--static-auth-secret=${TURN_SECRET}
|
|
--lt-cred-mech
|
|
--realm=${DOMAIN}
|
|
--fingerprint
|
|
--no-multicast-peers
|
|
--no-cli
|
|
--no-tcp-relay
|
|
--min-port={{ BBB_RELAY_PORT_START }}
|
|
--max-port={{ BBB_RELAY_PORT_END }}
|
|
--external-ip=${EXTERNAL_IPv4}
|
|
{% if BBB_IP6_ENABLED %}--external-ip=${EXTERNAL_IPv6}{% endif %}
|
|
--cert=${COTURN_TLS_CERT_PATH}
|
|
--pkey=${COTURN_TLS_KEY_PATH}
|
|
{% endif %}
|
|
{% if BBB_COLLABORA_ENABLED | bool %}
|
|
bbb-web:
|
|
depends_on:
|
|
- redis
|
|
- etherpad
|
|
- bbb-pads
|
|
etherpad:
|
|
depends_on:
|
|
- redis
|
|
{% endif %}
|