From 46591f2232e69739da5ab120fe819e2305c53ab0 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Sun, 21 Mar 2021 02:26:21 +0100
Subject: add coturn server for glt

---
 roles/apps/coturn/tasks/main.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

(limited to 'roles/apps/coturn/tasks/main.yml')

diff --git a/roles/apps/coturn/tasks/main.yml b/roles/apps/coturn/tasks/main.yml
index 176be664..a35734a8 100644
--- a/roles/apps/coturn/tasks/main.yml
+++ b/roles/apps/coturn/tasks/main.yml
@@ -59,6 +59,7 @@
     daemon_reload: yes
 
 - name: configure nginx vhost
+  when: coturn_install_nginx_vhost
   vars:
     nginx_vhost:
       name: "coturn-{{ coturn_realm }}"
@@ -68,6 +69,18 @@
   include_role:
     name: nginx/vhost
 
+- name: get certificate using acmetool
+  when: not coturn_install_nginx_vhost
+  import_role:
+    name: acmetool/cert
+  vars:
+    acmetool_cert_name: "coturn-{{ coturn_realm }}"
+    acmetool_cert_hostnames: "{{ coturn_hostnames }}"
+
+- name: apply hacky fix to support binding to privileged ports
+  when: (coturn_listening_port < 1024) or (coturn_tls_listening_port < 1024)
+  import_tasks: privileged-ports-hack.yml
+
 - name: install pod manifest
   vars:
     kubernetes_standalone_pod:
-- 
cgit v1.2.3