test/lib/coturn.sh

88 lines
1.9 KiB
Bash

#!/bin/bash
#
# CoTurn Service
PATH=$HOME/.docker/cli-plugins:/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
config_coturn() {
echo -ne "\n* Configuring /federated/apps/coturn container.."
spin &
SPINPID=$!
if [ ! -d "/federated/apps/coturn" ]; then
mkdir -p /federated/apps/coturn/data/etc
mkdir -p /federated/apps/coturn/data/var/lib/coturn
chown nobody /federated/apps/coturn/data/var/lib/coturn
fi
cat > /federated/apps/coturn/docker-compose.yml <<EOF
version: '3.7'
services:
coturn:
image: coturn/coturn:\${IMAGE_VERSION}
container_name: coturn
hostname: coturn.$DOMAIN
domainname: $DOMAIN
restart: always
networks:
federated:
ipv4_address: 172.99.0.34
env_file:
- ./.env
volumes:
- ./data/etc/turnserver.conf:/etc/turnserver.conf:ro
- ./data/var/lib/coturn:/var/lib/coturn
ports:
- 3478:3478
- 3478:3478/udp
- 3479:3479
- 3479:3479/udp
networks:
federated:
external: true
EOF
cat > /federated/apps/coturn/.env <<EOF
IMAGE_VERSION="4.6.2"
LOG_FILE=stdout
PORT=3478
ALT_PORT=3479
TLS_PORT=5349
TLS_ALT_PORT=5350
JSON_CONFIG='{"config":["no-auth"]}'
EOF
chmod 600 /federated/apps/coturn/.env
COTURN_SECRET=$(create_password);
COTURN_MATRIX_SECRET=$(grep turn_shared_secret: /federated/apps/matrix/data/matrix/homeserver.yaml | awk -F\" '{ print $2 }')
cat > /federated/apps/coturn/data/etc/turnserver.conf <<EOF
realm=coturn.$DOMAIN
user=coturn:$COTURN_SECRET
lt-cred-mech
use-auth-secret
static-auth-secret=$COTURN_MATRIX_SECRET
listening-ip=0.0.0.0
listening-port=3478
# Relay port range limit
min-port=49160
max-port=49200
EOF
kill -9 $SPINPID &> /dev/null
echo -ne "done."
}
start_coturn() {
# Start service with command to make sure it's up before proceeding
start_service "coturn" "nc -z 172.99.0.34 3478 &> /dev/null" "7"
kill -9 $SPINPID &> /dev/null
echo -ne "done."
}