diff options
| author | Quentin <quentin@dufour.io> | 2021-01-18 08:18:21 +0100 |
|---|---|---|
| committer | Quentin <quentin@dufour.io> | 2021-01-18 08:18:21 +0100 |
| commit | ad6017eea058f7cb6fdf078783f992a4f45a3e15 (patch) | |
| tree | 6620bcc9e1ea61a5689b763b9ad8280275e35e76 /app/im/config/coturn | |
| parent | 79b7273ff2a487d6721d393682c8ad3927467a75 (diff) | |
| parent | c642370def01f09d966b3b9c643cfe416ea115cf (diff) | |
| download | infrastructure-ad6017eea058f7cb6fdf078783f992a4f45a3e15.tar.gz infrastructure-ad6017eea058f7cb6fdf078783f992a4f45a3e15.zip | |
Merge pull request 'Reorganize app/ and add script for secret management' (#29) from test_reorganize into master
Reviewed-on: https://git.deuxfleurs.fr/Deuxfleurs/infrastructure/pulls/29
Diffstat (limited to 'app/im/config/coturn')
| -rw-r--r-- | app/im/config/coturn/turnserver.conf.tpl | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/app/im/config/coturn/turnserver.conf.tpl b/app/im/config/coturn/turnserver.conf.tpl new file mode 100644 index 0000000..f867ac0 --- /dev/null +++ b/app/im/config/coturn/turnserver.conf.tpl @@ -0,0 +1,19 @@ +use-auth-secret +static-auth-secret={{ key "secrets/chat/coturn/static-auth" | trimSpace }} +realm=turn.deuxfleurs.fr + +# VoIP traffic is all UDP. There is no reason to let users connect to arbitrary TCP endpoints via the relay. +#no-tcp-relay + +# don't let the relay ever try to connect to private IP address ranges within your network (if any) +# given the turn server is likely behind your firewall, remember to include any privileged public IPs too. +#denied-peer-ip=10.0.0.0-10.255.255.255 +#denied-peer-ip=192.168.0.0-192.168.255.255 +#denied-peer-ip=172.16.0.0-172.31.255.255 + +# consider whether you want to limit the quota of relayed streams per user (or total) to avoid risk of DoS. +user-quota=12 # 4 streams per video call, so 12 streams = 3 simultaneous relayed calls per user. +total-quota=1200 + +min-port=49152 +max-port=49252 |