Nextcloud Installation - Part 12 Setup TURN Server for Nextcloud Talk
We setup a TURN server to use with nextcloud TALK APP.
Nextcloud document:
https://nextcloud-talk.readthedocs.io...
Commands available here:
https://geek2gether.com/ttsystems/saf...
Config file:
/etc/turnserver.conf
STUN server port is 3478 for UDP and TCP, and 5349 for TLS.
Allow connection on the UDP port 3478
#listening-port=3478
and 5349 for TLS (secure)
tls-listening-port=5349
Require authentication
fingerprint
lt-cred-mech
We will use the longterm authentication mechanism, but if
you want to use the auth-secret mechanism, comment lt-cred-mech and
uncomment use-auth-secret
Check: https://github.com/coturn/coturn/issu...
#The static auth secret needs to be changed, in this tutorial
we'll generate a token using OpenSSL
use-auth-secret
static-auth-secret=paste secret
----
If you decide to use use-auth-secret, After saving the changes, change the auth-secret using the following command:
sed -i "s/replace-this-secret/$(openssl rand -hex 32)/" /etc/turnserver.conf
This will replace the replace-this-secret text on the file with the generated token using openssl.
Specify the server name and the realm that will be used
if is your first time configuring, just use the domain as name
server-name=server name
realm=server name
Important:
Create a test user if you want
You can remove this user after testing
#user=guest:somepassword
total-quota=100
stale-nonce=600
Path to the SSL certificate and private key. In this example we will use
the letsencrypt generated certificate files.
cert=cert path
pkey=private key path
Specify the allowed OpenSSL cipher list for TLS/DTLS connections
cipher-list="ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384"
Specify the process user and group
proc-user=turnserver
proc-group=turnserver
#end
For questions and discussions about errors or if you need further assistance, please join our discussion community at:
https://geek2gether.com/forums/nextcl...