# coturn TURN server config template.
# Replace placeholders before use:
#   TURN_PUBLIC_IP     the public IP of the machine running coturn
#   YOUR_TURN_DOMAIN   e.g. turn.example.com
#   CHANGE_ME_TURN_USER / CHANGE_ME_TURN_PASSWORD   pick your own strong values
#
# Save as /etc/turnserver.conf

listening-port=3478
tls-listening-port=5349
external-ip=TURN_PUBLIC_IP
realm=YOUR_TURN_DOMAIN
server-name=YOUR_TURN_DOMAIN

# Static credentials - replace with your own strong, random values.
user=CHANGE_ME_TURN_USER:CHANGE_ME_TURN_PASSWORD

# TLS certs (obtain via certbot on this host, e.g. certbot certonly --standalone -d YOUR_TURN_DOMAIN)
cert=/etc/letsencrypt/live/YOUR_TURN_DOMAIN/fullchain.pem
pkey=/etc/letsencrypt/live/YOUR_TURN_DOMAIN/privkey.pem

fingerprint
lt-cred-mech
no-multicast-peers
no-cli
min-port=49152
max-port=65535