realm={{ coturn_realm }}
fingerprint

listening-port={{ coturn_listening_port }}
tls-listening-port={{ coturn_tls_listening_port }}

cert=/etc/coturn/ssl/cert.pem
pkey=/etc/coturn/ssl/privkey.pem
dh-file=/etc/coturn/ssl/dhparams.pem
cipher-list="ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES128:!RSA:!ADH:!AECDH:!MD5"
no-tlsv1
no-tlsv1_1

use-auth-secret
static-auth-secret={{ coturn_auth_secret }}
stale-nonce=600

max-bps={{ coturn_max_bps }}
bps-capacity={{ coturn_bps_capacity }}
relay-threads={{ coturn_threads }}

no-multicast-peers
denied-peer-ip={{ kubernetes_standalone_pod_cidr | ansible.utils.ipaddr('network') }}-{{ kubernetes_standalone_pod_cidr | ansible.utils.ipaddr('broadcast') }}

no-cli