vdo.ninja/turnserver.MD

This was used with OVH loaded onto a VM with Ubuntu 20

# sudo apt-get update
# 
# sudo apt-get install coturn
# set TURNSERVER_ENABLED=1
# 
# sudo add-apt-repository ppa:certbot/certbot
# sudo apt-get install certbot
# sudo certbot certonly --standalone
# 
# sudo ls /etc/letsencrypt/live/turn3.obs.ninja/fullchain.pem
# 
# sudo apt install net-tools
# ifconfig
# 
# sudo ufw allow 60000:62000/tcp ## can be whatever port range you want I guess
# sudo ufw allow 60000:62000/udp ## default needed is like 40000 to 65000 or so
#
# sudo vi /etc/turnserver.conf
#
# sudo systemctl restart coturn
# sudo systemctl status coturn
#
##

## turnserver.conf

listening-port=3478
tls-listening-port=443

external-ip = 111.222.333.444      ## external IPv4 address
external-ip = 1111:3333:555:3333::9999  ## External ipv6 address.  Add to DNS server as well

min-port=60000 ## ufw is needed to open these ports
max-port=62000 ## default is like 49000 to 60000 or so?

realm=turn3.obs.ninja	## Domain name is needed; OVH provides one, but you can add a novelty one for cheap yourself.
server-name=turn3.obs.ninja

#lt-cred-mech
#userdb=/etc/turnuserdb.conf  ## For server-based credentials, if you want some added security

fingerprint ## security
stale-nonce ## security

no-multicast-peers
no-stun  ## you might want this on actually

#oauth
lt-cred-mech
user=USERNAME:PASSWORD ## Change as desired

# max-bps=650000 # Just over 5mbps limit ; use to prevernt DDoS attacks?

no-loopback-peers

# use real-valid certificate/privatekey files
cert=/etc/letsencrypt/live/turn.obs.ninja/fullchain.pem ## update as per certbot
pkey=/etc/letsencrypt/live/turn.obs.ninja/privkey.pem

#verbose
no-stdout-log