view plugins/mod_turn_external.lua @ 14219:7f4fcbb1bbe4 13.0

certmanager: Drop embedded Mozilla TLSRef data in favour of util.tlsref This adds a 'tls_profile_version' configuration option. If unspecified, it will use the default profile version from util.tlsref. If specified, it must be either a valid version (known to util.tlsref) or the value "latest". This allows admins to pin to specific versions, go with the default (for the best balance between security/stability) or always use the latest available profiles.
author Matthew Wild <mwild1@gmail.com>
date Fri, 12 Jun 2026 13:04:23 +0100
parents 7fd6feb86dbe
children
line wrap: on
line source

local set = require "prosody.util.set";

local secret = module:get_option_string("turn_external_secret");
local host = module:get_option_string("turn_external_host", module.host);
local user = module:get_option_string("turn_external_user");
local port = module:get_option_integer("turn_external_port", 3478, 1, 65535);
local ttl = module:get_option_period("turn_external_ttl", "1 day");
local tcp = module:get_option_boolean("turn_external_tcp", false);
local tls_port = module:get_option_integer("turn_external_tls_port", nil, 1, 65535);

if not secret then
	module:log_status("error", "Failed to initialize: the 'turn_external_secret' option is not set in your configuration");
	return;
end

local services = set.new({ "stun-udp"; "turn-udp" });
if tcp then
	services:add("stun-tcp");
	services:add("turn-tcp");
end
if tls_port then
	services:add("turns-tcp");
end

module:depends "external_services";

for _, type in ipairs({ "stun"; "turn"; "turns" }) do
	for _, transport in ipairs({"udp"; "tcp"}) do
		if services:contains(type .. "-" .. transport) then
			module:add_item("external_service", {
				type = type;
				transport = transport;
				host = host;
				port = type == "turns" and tls_port or port;

				username = (type == "turn" or type == "turns") and user or nil;
				secret = (type == "turn" or type == "turns") and secret or nil;
				ttl = (type == "turn" or type == "turns") and ttl or nil;
			})
		end
	end
end