templates/docker-compose.yml

@@ -118,3 +118,30 @@ services:
     volumes:
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro
+
+{% if nextcloud.turn defined %}
+  coturn:
+    image: instrumentisto/coturn:latest
+    restart: unless-stopped
+    networks:
+      - traefik-public
+    command:
+      - '--realm={{ nextcloud.turndomain }}'
+      - '--server-name=turn-server'
+      - '--fingerprint'
+      - '--listening-ip=0.0.0.0'
+      - '--external-ip={{ static_ipv4 }}'
+      - '--listening-port=3478'
+      - '--min-port=60100'
+      - '--max-port=60300'
+      - '--log-file=/var/log/turnserver.log'
+      - '--tls-listening-port=443'
+      - '--use-auth-secret'
+      - '--static-auth-secret={{ nextcloud.turn.secret }}'
+    labels:
+      traefik.enable: 'true'
+      traefik.docker.network: traefik-public
+      traefik.http.routers.turn-nextcloud_{{ nextcloud.id }}.rule: Host(`{{ nextcloud.turn.domain }}`)
+      traefik.http.routers.turn-nextcloud_{{ nextcloud.id }}.tls: 'true'
+      traefik.http.routers.turn-nextcloud_{{ nextcloud.id }}.tls.certresolver: lakedrops
+{% endif %}