From ed998fc1d3ffebb6b6ddc2d31e9761bb57a5a159 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Mon, 18 Dec 2023 13:22:34 +0100
Subject: [PATCH] Use TCP for TLS connections

---
 site-cookbooks/kosmos-ejabberd/recipes/coturn.rb          | 2 +-
 site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/site-cookbooks/kosmos-ejabberd/recipes/coturn.rb b/site-cookbooks/kosmos-ejabberd/recipes/coturn.rb
index a9b581b..b273a8c 100644
--- a/site-cookbooks/kosmos-ejabberd/recipes/coturn.rb
+++ b/site-cookbooks/kosmos-ejabberd/recipes/coturn.rb
@@ -37,7 +37,7 @@ end
 
 firewall_rule 'ejabberd_stun_turn_tls' do
   port     node["ejabberd"]["stun_turn_port_tls"]
-  protocol :udp
+  protocol :tcp
   command  :allow
 end
 
diff --git a/site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb b/site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb
index 64b89df..b49ebfa 100644
--- a/site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb
+++ b/site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb
@@ -242,7 +242,7 @@ modules:
         host: <%= @turn_domain %>
         port: <%= @stun_turn_port_tls %>
         type: stuns
-        transport: udp
+        transport: tcp
         restricted: false
       -
         host: <%= @turn_domain %>