strepsirrhini/lemur
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update coturn letsencrypt config

Browse source
This commit is contained in:
Iván Chavero 2022-09-23 00:08:27 -06:00 committed by Renich Bon Ćirić
parent 658c68adb0
commit 3fbbcfc3b9
3 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
nextcloud/ansible/roles/turn/templates/copy_coturn_certs.sh.j2
View file

@ -4,3 +4,4 @@ cp -H /etc/letsencrypt/live/{{ turn_fqdn }}/fullchain.pem /etc/pki/coturn/public
cp -H /etc/letsencrypt/live/{{ turn_fqdn }}/privkey.pem /etc/pki/coturn/private/ cp -H /etc/letsencrypt/live/{{ turn_fqdn }}/privkey.pem /etc/pki/coturn/private/
chgrp coturn /etc/pki/coturn/private/privkey.pem chgrp coturn /etc/pki/coturn/private/privkey.pem
chmod g+r /etc/pki/coturn/private/privkey.pem chmod g+r /etc/pki/coturn/private/privkey.pem
systemctl restart coturn

4
nextcloud/ansible/roles/turn/templates/turnserver.j2
View file

@ -9,8 +9,8 @@ stale-nonce
{% if turn_letsencrypt_certificate_enabled %} {% if turn_letsencrypt_certificate_enabled %}
# certificados # certificados
cert={{ turn_fullchain }} cert=/etc/pki/coturn/public/fullchain.pem
pkey={{ turn_key }} pkey=/etc/pki/coturn/private/privkey.pem
{% endif %} {% endif %}
# logs # logs

2
nextcloud/ansible/vars/RedHat.yaml
View file

@ -85,9 +85,9 @@ nextcloud_talk_stun_server: turn0.softwarelibre.mx:443
turn_fqdn: turn1.softwarelibre.mx turn_fqdn: turn1.softwarelibre.mx
turn_firewalld_enabled: false turn_firewalld_enabled: false
turn_letsencrypt_certificate_enabled: true turn_letsencrypt_certificate_enabled: true
turn_static_auth_secret: ElSoftwareLibre
turn_fullchain: /etc/pki/tls/certs/turn1.softwarelibre.mx-fullchain.crt turn_fullchain: /etc/pki/tls/certs/turn1.softwarelibre.mx-fullchain.crt
turn_key: /etc/pki/tls/private/letsencrypt_account.key turn_key: /etc/pki/tls/private/letsencrypt_account.key
turn_static_auth_secret: ElSoftwareLibre
# nats # nats
nats_firewalld_enabled: false nats_firewalld_enabled: false