Use domain instead of IP, add TLS endpoints

site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb

@@ -233,17 +233,29 @@ modules:
     secret: <%= @stun_secret %>
     services:
       -
-        host: <%= @turn_ip_address %>
+        host: <%= @turn_domain %>
         port: <%= @stun_turn_port %>
         type: stun
         transport: udp
         restricted: false
       -
-        host: <%= @turn_ip_address %>
+        host: <%= @turn_domain %>
+        port: <%= @stun_turn_port_tls %>
+        type: stuns
+        transport: udp
+        restricted: false
+      -
+        host: <%= @turn_domain %>
         port: <%= @stun_turn_port %>
         type: turn
         transport: udp
         restricted: true
+      -
+        host: <%= @turn_domain %>
+        port: <%= @stun_turn_port_tls %>
+        type: turns
+        transport: tcp
+        restricted: true
   mod_vcard:
     search: false
   mod_vcard_xupdate: {}

site-cookbooks/kosmos-ejabberd/templates/turnserver.conf.erb

@@ -436,14 +436,14 @@ realm=<%= @realm %>
 # Use an absolute path or path relative to the 
 # configuration file.
 #
-#cert=/usr/local/etc/turn_server_cert.pem
+cert=<%= @cert %>
 
 # Private key file.
 # Use an absolute path or path relative to the 
 # configuration file.
 # Use PEM file format.
 #
-#pkey=/usr/local/etc/turn_server_pkey.pem
+pkey=<%= @pkey %>
 
 # Private key file password, if it is in encoded format.
 # This option has no default value.
@@ -642,7 +642,7 @@ syslog
 # By default it is always ON.
 # See also options cli-ip and cli-port.
 #
-#no-cli
+no-cli
 
 #Local system IP address to be used for CLI server endpoint. Default value
 # is 127.0.0.1.