19 lines
619 B
Nix
19 lines
619 B
Nix
{config, ...}: {
|
|
services.coturn = with config.constants; let
|
|
acmeDir = config.security.acme.certs.${coturn-realm}.directory;
|
|
coturn-realm = "turn.${domain}";
|
|
in {
|
|
enable = true;
|
|
cert = "${acmeDir}/fullchain.pem";
|
|
listening-port = port.coturn;
|
|
min-port = port.coturn-relay-udp-min;
|
|
max-port = port.coturn-relay-udp-max;
|
|
pkey = "${acmeDir}/key.pem";
|
|
realm = coturn-realm;
|
|
static-auth-secret-file = config.sops.secrets.coturn.path;
|
|
tls-listening-port = port.coturn-tls;
|
|
use-auth-secret = true;
|
|
};
|
|
|
|
sops.secrets.coturn.group = config.users.users.turnserver.group;
|
|
}
|