mirror of
https://github.com/spantaleev/matrix-docker-ansible-deploy.git
synced 2024-11-07 19:27:35 +01:00
540416e32d
These old versions of TLS rely on MD5 and SHA-1, both now broken, and contain other flaws. TLS 1.0 is no longer PCI-DSS compliant and the TLS working group has adopted a document to deprecate TLS 1.0 and TLS 1.1.
42 lines
970 B
Django/Jinja
42 lines
970 B
Django/Jinja
#jinja2: lstrip_blocks: "True"
|
|
use-auth-secret
|
|
static-auth-secret={{ matrix_coturn_turn_static_auth_secret }}
|
|
realm=turn.{{ matrix_server_fqn_matrix }}
|
|
|
|
min-port={{ matrix_coturn_turn_udp_min_port }}
|
|
max-port={{ matrix_coturn_turn_udp_max_port }}
|
|
external-ip={{ matrix_coturn_turn_external_ip_address }}
|
|
|
|
log-file=stdout
|
|
pidfile=/var/tmp/turnserver.pid
|
|
userdb=/var/tmp/turnserver.db
|
|
|
|
no-cli
|
|
|
|
{% if matrix_coturn_tls_enabled %}
|
|
cert={{ matrix_coturn_tls_cert_path }}
|
|
pkey={{ matrix_coturn_tls_key_path }}
|
|
no-tlsv1
|
|
no-tlsv1_1
|
|
{% else %}
|
|
no-tls
|
|
no-dtls
|
|
{% endif %}
|
|
|
|
prod
|
|
no-tcp-relay
|
|
|
|
{% if matrix_coturn_user_quota != None %}
|
|
user-quota={{ matrix_coturn_user_quota }}
|
|
{% endif %}
|
|
{% if matrix_coturn_total_quota != None %}
|
|
total-quota={{ matrix_coturn_total_quota }}
|
|
{% endif %}
|
|
|
|
{% for ip_range in matrix_coturn_denied_peer_ips %}
|
|
denied-peer-ip={{ ip_range }}
|
|
{% endfor %}
|
|
{% for ip_range in matrix_coturn_allowed_peer_ips %}
|
|
allowed-peer-ip={{ ip_range }}
|
|
{% endfor %}
|