fix split of coturn and nextcloud

This commit is contained in:
Lars Hahn 2023-08-26 21:08:52 +02:00
parent ec078949c8
commit 8782b045f0
3 changed files with 0 additions and 63 deletions

View File

@ -29,32 +29,3 @@ ncloud_config:
redis_port: 6379 redis_port: 6379
redis_remote_url: "" redis_remote_url: ""
ncloud_coturn_pass: SomeRandomString
ncloud_coturn_port: 5349
ncloud_coturn_parallel_connection: 0 #0 is unlimited
ncloud_coturn_bandwitdh: 0 #0 B/s is unlimited
ncloud_coturn_session_lifetime: 600
ncloud_coturn_cert: "/etc/letsencrypt/live/{{ ncloud_domain[0] }}/fullchain.pem"
ncloud_coturn_pkey: "/etc/letsencrypt/live/{{ ncloud_domain[0] }}/privkey.pem"
ncloud_coturn_dhparam: "/etc/letsencrypt/ssl-dhparams.pem"
coturn_configs:
- "tls-listening-port={{ ncloud_coturn_port }}"
- fingerprint
- use-auth-secret
- "static-auth-secret={{ ncloud_coturn_pass }}"
- "realm={{ ncloud_domain[0] }}"
- "total-quota={{ ncloud_coturn_parallel_connection }}"
- "bps-capacity={{ ncloud_coturn_bandwitdh }}"
- "stale-nonce={{ ncloud_coturn_session_lifetime }}"
- cipher-list=\“ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384\″
- no-multicast-peers
- no-tlsv1
- no-tlsv1_1
- no-stdout-log
- "cert={{ ncloud_coturn_cert }}"
- "pkey={{ ncloud_coturn_pkey }}"
- "dh-file={{ ncloud_coturn_dhparam }}"

View File

@ -1,32 +0,0 @@
---
- name: install coturn server
apt:
update_cache: yes
state: "{% if cloud_update | bool %}latest{% else %}present{% endif %}"
install_recommends: yes
pkg:
- "coturn"
- name: enable coturn server
lineinfile:
path: "/etc/default/coturn"
regexp: '^#?TURNSERVER_ENABLED='
line: "TURNSERVER_ENABLED=1"
notify: restart coturn
- name: enable coturn server
lineinfile:
path: "/etc/turnserver.conf"
regexp: '^#?{{ configline.split("=")[0] }}{% if configline.split("=") | length > 1 %}={% endif %}'
line: "{{ configline }}"
loop: "{{ coturn_configs }}"
loop_control:
loop_var: configline
label: "{{ configline }}"
notify: restart coturn
- name: set coturn capabilities for port setting
capabilities:
path: /usr/bin/turnserver
capability: cap_net_bind_service=+ep
state: present

View File

@ -42,5 +42,3 @@
- name: install notify_push (file high-performance-backend) - name: install notify_push (file high-performance-backend)
include_tasks: file_hpb.yml include_tasks: file_hpb.yml
- name: install coturn server
include_tasks: coturn.yml