Files
danu-signal/turnserver.conf.tmpl
2026-03-22 16:25:37 +01:00

21 lines
667 B
Cheetah

# Coturn TURN server configuration
# See https://github.com/coturn/coturn for full options
# Static user credentials (username:password)
user={{ .Env.COTURN_USER }}:{{ .Env.COTURN_PASSWORD }}
# The default realm for users
realm={{ .Env.DOMAIN }}
# TURN server allocates address family according to TURN client request.
allocation-default-address-family=ipv4
# Disable RFC5780 (NAT behavior discovery) to reduce amplification attack risk.
no-rfc5780
# Disable old STUN Binding requests; use only XOR-MAPPED-ADDRESS.
no-stun-backward-compatibility
# Only send RESPONSE-ORIGIN attribute in binding response if RFC5780 is enabled.
response-origin-only-with-rfc5780