From 94660e7b4b2c751ee208af33c14af08082692090 Mon Sep 17 00:00:00 2001
From: Evangelos Foutras <evangelos@foutras.com>
Date: Mon, 1 May 2023 03:34:58 +0300
Subject: [PATCH] matrix: rebase turnserver.conf to coturn 4.6.2-1
---
roles/matrix/templates/turnserver.conf.j2 | 18 ++++++++++--------
1 file changed, 10 insertions(+), 8 deletions(-)
diff --git a/roles/matrix/templates/turnserver.conf.j2 b/roles/matrix/templates/turnserver.conf.j2
index 16b63706f..639d120c5 100644
--- a/roles/matrix/templates/turnserver.conf.j2
+++ b/roles/matrix/templates/turnserver.conf.j2
@@ -1,7 +1,7 @@
# Coturn TURN SERVER configuration file
#
# Boolean values note: where a boolean value is supposed to be used,
-# you can use '0', 'off', 'no', 'false', or 'f' as 'false,
+# you can use '0', 'off', 'no', 'false', or 'f' as 'false',
# and you can use '1', 'on', 'yes', 'true', or 't' as 'true'
# If the value is missing, then it means 'true' by default.
#
@@ -23,7 +23,7 @@ listening-port=2410
# "automatically" recognizes the type of traffic. Actually, two listening
# endpoints (the "plain" one and the "tls" one) are equivalent in terms of
# functionality; but Coturn keeps both endpoints to satisfy the RFC 5766 specs.
-# For secure TCP connections, Coturn currently supports
+# For secure TCP connections, Coturn currently supports SSL version 3 and
# TLS version 1.0, 1.1 and 1.2.
# For secure UDP connections, Coturn supports DTLS version 1.
#
@@ -389,7 +389,7 @@ realm={{ matrix_domain }}
# Total bytes-per-second bandwidth the TURN server is allowed to allocate
# for the sessions, combined (input and output network streams are treated separately).
#
-# bps-capacity=0
+#bps-capacity=0
# Uncomment if no UDP client listener is desired.
# By default UDP client listener is always started.
@@ -611,7 +611,8 @@ no-stun
# This is the timestamp/username separator symbol (character) in TURN REST API.
# The default value is ':'.
-# rest-api-separator=:
+#
+#rest-api-separator=:
# Flag that can be used to allow peers on the loopback addresses (127.x.x.x and ::1).
# This is an extra security measure.
@@ -663,7 +664,7 @@ secure-stun
#
#mobility
-# Allocate Address Family according (DEPRECATED and will be removed in favour of allocation-default-address-family)
+# Allocate Address Family according (DEPRECATED and will be removed in favor of allocation-default-address-family)
# If enabled then TURN server allocates address family according the TURN
# Client <=> Server communication address family.
# (By default Coturn works according RFC 6156.)
@@ -678,10 +679,10 @@ secure-stun
# Possible values: "ipv4" or "ipv6" or "keep"
# "keep" sets the allocation default address family according to
# the TURN client allocation request connection address family.
+#
#allocation-default-address-family="ipv4"
#allocation-default-address-family="ipv4"
-
# User name to run the process. After the initialization, the turnserver process
# will attempt to change the current user ID to that user.
#
@@ -734,13 +735,14 @@ no-cli
#web-admin-port=8080
# Web-admin server listen on STUN/TURN worker threads
-# By default it is disabled for security resons! (Not recommended in any production environment!)
+# By default it is disabled for security reasons! (Not recommended in any production environment!)
#
#web-admin-listen-on-workers
-#acme-redirect=http://redirectserver/.well-known/acme-challenge/
# Redirect ACME, i.e. HTTP GET requests matching '^/.well-known/acme-challenge/(.*)' to '<URL>$1'.
# Default is '', i.e. no special handling for such requests.
+#
+#acme-redirect=http://redirectserver/.well-known/acme-challenge/
# Server relay. NON-STANDARD AND DANGEROUS OPTION.
# Only for those applications when you want to run
--
GitLab