kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 30 Pull Requests 3 Projects 2 Activity

Explicitly configure STUN/TURN service discovery

Browse Source 
It didn't return any services without the explicit config.
This commit is contained in:
Basti 2020-05-02 14:30:36 +02:00
parent 4448ec2173
commit 3a37cade0e
No known key found for this signature in database
GPG Key ID: BE4634D632D39B67
2 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
site-cookbooks/kosmos-ejabberd/recipes/default.rb
View File

@ -156,7 +156,6 @@ template "/opt/ejabberd/conf/ejabberd.yml" do
hosts: hosts, hosts: hosts,
admin_users: admin_users, admin_users: admin_users,
stun_auth_realm: "kosmos.org", stun_auth_realm: "kosmos.org",
turn_ip_address: node['ipaddress'],
turn_min_port: node["kosmos-ejabberd"]["turn_min_port"], turn_min_port: node["kosmos-ejabberd"]["turn_min_port"],
turn_max_port: node["kosmos-ejabberd"]["turn_max_port"] turn_max_port: node["kosmos-ejabberd"]["turn_max_port"]
notifies :run, "execute[ejabberdctl reload_config]", :delayed notifies :run, "execute[ejabberdctl reload_config]", :delayed

17
site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb
View File

@ -80,7 +80,7 @@ listen:
module: ejabberd_stun module: ejabberd_stun
auth_realm: <%= @stun_auth_realm %> auth_realm: <%= @stun_auth_realm %>
use_turn: true use_turn: true
turn_ip: <%= @turn_ip_address %> turn_ip: <%= node['ipaddress'] %>
turn_min_port: <%= @turn_min_port %> turn_min_port: <%= @turn_min_port %>
turn_max_port: <%= @turn_max_port %> turn_max_port: <%= @turn_max_port %>
@ -223,7 +223,20 @@ modules:
versioning: true versioning: true
store_current_id: true store_current_id: true
mod_shared_roster: {} mod_shared_roster: {}
mod_stun_disco: {} mod_stun_disco:
services:
-
host: <%= node['ipaddress'] %>
port: 3478
type: stun
transport: udp
restricted: false
-
host: <%= node['ipaddress'] %>
port: 3478
type: turn
transport: udp
restricted: true
mod_vcard: mod_vcard:
search: false search: false
mod_vcard_xupdate: {} mod_vcard_xupdate: {}