site-cookbooks/kosmos-ejabberd/attributes/default.rb

@@ -1,5 +1,5 @@
-node.default["kosmos-ejabberd"]["version"] = "20.03"
+node.default["kosmos-ejabberd"]["version"] = "20.04"
-node.default["kosmos-ejabberd"]["checksum"] = "f0ccf1c47c3a30303140f08c887998ee34e731f34ea240d56748a68aa2a2e303"
+node.default["kosmos-ejabberd"]["checksum"] = "5377ff18960a399e661fa23f4a1d9f57c78d4579ed108c52b8f68e7cd9268868"
 
 node.override["tor"]["HiddenServices"]["ejabberd"] = {
   "HiddenServicePorts" => [

site-cookbooks/kosmos-ejabberd/recipes/default.rb

@@ -200,6 +200,12 @@ unless node.chef_environment == "development"
     protocol :tcp
     command  :allow
   end
+
+  firewall_rule 'ejabberd_stun_turn' do
+    port     3478
+    protocol :udp
+    command  :allow
+  end
 end
 
 #

site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb

@@ -74,6 +74,13 @@ listen:
     ##  "/pub/archive": mod_http_fileserver
     ## register: true
     captcha: false
+  -
+    port: 3478
+    transport: udp
+    module: ejabberd_stun
+    use_turn: true
+    ## The server's public IPv4 address:
+    # turn_ip: 203.0.113.3
 
 s2s_use_starttls: optional
 
@@ -214,6 +221,7 @@ modules:
     versioning: true
     store_current_id: true
   mod_shared_roster: {}
+  mod_stun_disco: {}
   mod_vcard:
     search: false
   mod_vcard_xupdate: {}