diff --git a/configs/deployment/configs/turnserver.conf b/configs/deployment/configs/turnserver.conf new file mode 100644 index 00000000..fe0488b7 --- /dev/null +++ b/configs/deployment/configs/turnserver.conf @@ -0,0 +1,29 @@ +# Coturn ana config + +#Portları firewall üzerinden açmak için aşağıdaki kodları kullan. +#sudo ufw allow 3478/udp +#sudo ufw allow 3478/tcp +#sudo ufw allow 5349/tcp + +listening-port=3478 +tls-listening-port=5349 + +# 🔑 Prod’da sabit domain kullan +realm=kursplatform.local + +# 🔑 TURN için shared secret +# Bunu backend’te de aynı şekilde kullanacaksın (dinamik credential üretmek için) +use-auth-secret +static-auth-secret=supersecretkey123 + +# TLS sertifikaları (opsiyonel, prod’da Let’s Encrypt kullanabilirsin) +cert=/etc/ssl/sozsoft.com/fullchain1.pem +pkey=/etc/ssl/sozsoft.com/privkey1.pem + +# STUN/TURN protokolleri +lt-cred-mech +fingerprint +no-stdout-log + +# Güvenlik +stale-nonce diff --git a/configs/deployment/docker-compose-devops.yml b/configs/deployment/docker-compose-devops.yml index c22efce1..9cf4db46 100644 --- a/configs/deployment/docker-compose-devops.yml +++ b/configs/deployment/docker-compose-devops.yml @@ -93,3 +93,12 @@ services: - n8n_data:/home/node/.n8n networks: - n8n + + coturn: + image: instrumentisto/coturn + container_name: coturn + restart: unless-stopped + network_mode: host + volumes: + - ./configs/turnserver.conf:/etc/coturn/turnserver.conf:ro + command: ["-c", "/etc/coturn/turnserver.conf"]