summaryrefslogtreecommitdiff
path: root/roles/apps/coturn/templates/turnserver.conf.j2
blob: 84e90cfd471873db8b2368aebb136bc07e4ac7e2 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
realm={{ coturn_realm }}
fingerprint

listening-port={{ coturn_listening_port }}
tls-listening-port={{ coturn_tls_listening_port }}

cert=/etc/coturn/ssl/cert.pem
pkey=/etc/coturn/ssl/privkey.pem
dh-file=/etc/coturn/ssl/dhparams.pem
cipher-list="ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES128:!RSA:!ADH:!AECDH:!MD5"
no-tlsv1
no-tlsv1_1

use-auth-secret
static-auth-secret={{ coturn_auth_secret }}
stale-nonce=600

max-bps={{ coturn_max_bps }}
bps-capacity={{ coturn_bps_capacity }}
relay-threads={{ coturn_threads }}

no-multicast-peers
denied-peer-ip={{ kubernetes_standalone_pod_cidr | ansible.utils.ipaddr('network') }}-{{ kubernetes_standalone_pod_cidr | ansible.utils.ipaddr('broadcast') }}

no-cli