pidfile="/var/run/coturn/coturn.pid"
verbose
fingerprint
{% if turn_auth_secret is defined %}
use-auth-secret
static-auth-secret {{ turn_auth_secret }}
{% else %}
lt-cred-mech
{% endif %}
no-sslv2
no-sslv3
no-loopback-peers
no-multicast-peers
realm {{ turn_realm | default(ansible_domain) }}
proc-user coturn
proc-group coturn
syslog

{% for ip in turn_listen_ip %}
listening-ip {{ ip }}
{% endfor %}

{% if not turn_allow_non_tls %}
no-tcp
no-udp
{% endif %}

listening-port {{ turn_port }}

{% if turn_tls %}
tls-listening-port {{ turn_tls_port }}
{% if turn_letsencrypt_cert is defined %}
cert /etc/coturn/ssl/cert.pem
pkey /etc/coturn/ssl/key.pem
{% else %}
cert {{ turn_tls_cert }}
pkey {{ turn_tls_key }}
{% endif %}
{% endif %}

{% if turn_external_ip is defined %}
external-ip {{ turn_external_ip }}
{% endif %}