kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 28 Pull Requests 3 Projects 2 Activity

Move TURN port to a different range

Browse Source 
It landed on a port used by PostgreSQL. Also switch STUN/TURN to TCP
because HAProxy does not support UDP.

Closes #240
This commit is contained in:
Greg Karékinian 2020-11-25 16:28:13 +01:00
parent 7636f6ed19
commit 085bd8abd5
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
site-cookbooks/kosmos-ejabberd/attributes/default.rb
View File

@ -1,7 +1,7 @@
node.default["kosmos-ejabberd"]["version"] = "20.04" node.default["kosmos-ejabberd"]["version"] = "20.04"
node.default["kosmos-ejabberd"]["checksum"] = "5377ff18960a399e661fa23f4a1d9f57c78d4579ed108c52b8f68e7cd9268868" node.default["kosmos-ejabberd"]["checksum"] = "5377ff18960a399e661fa23f4a1d9f57c78d4579ed108c52b8f68e7cd9268868"
node.default["kosmos-ejabberd"]["turn_min_port"] = 49152 node.default["kosmos-ejabberd"]["turn_min_port"] = 50000
node.default["kosmos-ejabberd"]["turn_max_port"] = 59152 node.default["kosmos-ejabberd"]["turn_max_port"] = 55000
node.override["tor"]["HiddenServices"]["ejabberd"] = { node.override["tor"]["HiddenServices"]["ejabberd"] = {
"HiddenServicePorts" => [ "HiddenServicePorts" => [

4
site-cookbooks/kosmos-ejabberd/recipes/default.rb
View File

@ -205,13 +205,13 @@ unless node.chef_environment == "development"
firewall_rule 'ejabberd_stun_turn' do firewall_rule 'ejabberd_stun_turn' do
port 3478 port 3478
protocol :udp protocol :tcp
command :allow command :allow
end end
firewall_rule 'ejabberd_turn' do firewall_rule 'ejabberd_turn' do
port node["kosmos-ejabberd"]["turn_min_port"]..node["kosmos-ejabberd"]["turn_max_port"] port node["kosmos-ejabberd"]["turn_min_port"]..node["kosmos-ejabberd"]["turn_max_port"]
protocol :udp protocol :tcp
command :allow command :allow
end end
end end

2
site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb
View File

@ -76,7 +76,7 @@ listen:
captcha: false captcha: false
- -
port: 3478 port: 3478
transport: udp transport: tcp
module: ejabberd_stun module: ejabberd_stun
auth_realm: <%= @stun_auth_realm %> auth_realm: <%= @stun_auth_realm %>
use_turn: true use_turn: true