mirror of
https://github.com/YunoHost-Apps/synapse_ynh.git
synced 2024-09-03 20:26:38 +02:00
20910ed00b
See 8a60754d70
Option removed in 4.5.2. This was a sane default before, but now coturn complains on startup that this option is invalid:
> Bad configuration format: no-loopback-peers
See also:
cve-2020-26262
https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
https://www.mageni.net/vulnerability/coturn-452-loopback-bypass-vulnerability-145204
29 lines
548 B
Text
29 lines
548 B
Text
lt-cred-mech
|
|
use-auth-secret
|
|
static-auth-secret=__TURNSERVER_PWD__
|
|
realm=__DOMAIN__
|
|
|
|
tls-listening-port=__TURNSERVER_TLS_PORT__
|
|
alt-tls-listening-port=__TURNSERVER_ALT_TLS_PORT__
|
|
min-port=49153
|
|
max-port=49193
|
|
cli-port=__CLI_PORT__
|
|
|
|
cert=/etc/yunohost/certs/__DOMAIN__/crt.pem
|
|
pkey=/etc/yunohost/certs/__DOMAIN__/key.pem
|
|
dh-file=/etc/ssl/private/dh2048.pem
|
|
|
|
no-sslv2
|
|
no-sslv3
|
|
no-tlsv1
|
|
no-tlsv1_1
|
|
|
|
no-multicast-peers
|
|
|
|
no-cli
|
|
|
|
log-file=/var/log/matrix-__APP__/turnserver.log
|
|
pidfile=/run/coturn-__APP__/turnserver.pid
|
|
simple-log
|
|
|
|
__TURN_EXTERNAL_IP__
|