Configure STUN/TURN

Configures built-in STUN/TURN support, and adds the new service discovery
module for it.

site-cookbooks/kosmos-ejabberd/recipes/default.rb

@@ -200,6 +200,12 @@ unless node.chef_environment == "development"
     protocol :tcp
     command  :allow
   end
+
+  firewall_rule 'ejabberd_stun_turn' do
+    port     3478
+    protocol :udp
+    command  :allow
+  end
 end
 
 #

site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb

@@ -74,6 +74,13 @@ listen:
     ##  "/pub/archive": mod_http_fileserver
     ## register: true
     captcha: false
+  -
+    port: 3478
+    transport: udp
+    module: ejabberd_stun
+    use_turn: true
+    ## The server's public IPv4 address:
+    # turn_ip: 203.0.113.3
 
 s2s_use_starttls: optional
 
@@ -214,6 +221,7 @@ modules:
     versioning: true
     store_current_id: true
   mod_shared_roster: {}
+  mod_stun_disco: {}
   mod_vcard:
     search: false
   mod_vcard_xupdate: {}