2026-02-07 18:58:17 -05:00
|
|
|
[staging]
|
2026-03-03 14:18:21 -05:00
|
|
|
staging.earthmanrpg.me ansible_user=discoman ansible_ssh_private_key_file=~/.ssh/id_ed25519_wsl_python-tdd letsencrypt_domain=staging.earthmanrpg.me
|
2026-02-07 18:58:17 -05:00
|
|
|
|
|
|
|
|
[production]
|
2026-02-10 21:16:00 -05:00
|
|
|
www.earthmanrpg.me ansible_user=discoman ansible_ssh_private_key_file=~/.ssh/id_ed25519_wsl_python-tdd
|
|
|
|
|
earthmanrpg.me ansible_user=discoman ansible_ssh_private_key_file=~/.ssh/id_ed25519_wsl_python-tdd
|
|
|
|
|
dashboard.earthmanrpg.me ansible_user=discoman ansible_ssh_private_key_file=~/.ssh/id_ed25519_wsl_python-tdd
|
|
|
|
|
|
|
|
|
|
[cicd]
|
|
|
|
|
gitea.earthmanrpg.me ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519_wsl_python-tdd
|
my-sea voice Phase C: WebRTC mesh signaling app + TURN endpoint + voice-btn wiring + coturn infra — TDD
Phase C (final) of the my-sea invite → spectator → voice blueprint. Self-
hosted WebRTC mesh voice, built room-general but wired for my-sea only; epic
6-seat rooms reuse the same consumer later (key on Room.id). Media never
touches the server — only signaling is relayed. Built from the blueprint's
distilled spec (disco-voice-mesh.pdf unreadable in-env: no poppler/pypdf).
- C1: new apps/voice/ — RoomVoiceConsumer (AsyncJsonWebsocketConsumer):
signaling-only relay (room group voice.<room_id> + per-peer peer.<uuid>;
hello→present handshake, offer/answer/ice routed by target/source, left on
disconnect). room_id is a STRING kwarg (mysea-<owner_id> now). _can_join
gates: mysea → owner OR present invitee (token deposited, not left); epic
UUID → seated gamer (later). routing.py ws/voice/<str:room_id>/; asgi.py
aggregates epic + voice urlpatterns under AuthMiddlewareStack.
voice-mesh.js: VoiceRoom client (getUserMedia AEC/NS/AGC, mesh
RTCPeerConnection, newcomer-offers handshake, tuneOpus SDP munge =
inbandfec+dtx+40kbps cap, mute via getAudioTracks().enabled), lazy-loaded.
- C2: apps/api VoiceTURNCredentialsAPI at /api/voice/turn-credentials/ —
coturn use-auth-secret REST scheme: username=<expiry>:<user_id>,
credential=base64(HMAC-SHA1(username, COTURN_SHARED_SECRET)) + stun/turn
iceServers + ttl. Authenticated-only. 4 ITs (HMAC shape, auth gate).
- C3: settings COTURN_SHARED_SECRET / COTURN_TURN_HOST / COTURN_REALM /
COTURN_TTL env block.
- C4: #id_voice_btn wiring — _burger.html renders .active + data-room-id when
voice_active; burger-btn.js bindVoiceBtn (active click → lazy-load
voice-mesh.js → join / toggle-mute; inactive → existing 2-pulse flash).
my_sea (owner) + my_sea_visit (spectator) views compute voice_active
(open 24h window) + voice_room_id=mysea-<owner_id>; spectator page now
includes the burger. 4 voice-context ITs.
- C5: infra/coturn.conf.j2 (use-auth-secret, the external-ip footgun, relay
port range, TLS 5349, peer-IP lockdown) + infra/coturn-playbook.yaml
(dedicated droplet, PySwiss-style split: install coturn, template conf, ufw
3478/5349/49152-65535, systemd enable) + [coturn] inventory placeholder.
*** Manual ops step: provision the droplet + fill inventory before voice
works on staging/prod; CI/local need none of it. ***
- C6: 8 channels ITs (@tag channels) — connect/auth/_can_join gate (owner,
present invitee, stranger, not-present, anon) + hello/present handshake +
offer routing + left-on-disconnect. Scope-injected; TransactionTestCase.
- JS: VoiceMeshSpec.js (tuneOpus) + voice-mesh.js registered in SpecRunner.
1440 IT/UT green; voice channels IT + full Jasmine + voice-btn FT green.
Voice infra is code-complete — provision the coturn droplet to go live.
Code architected by Disco DeDisco <discodedisco@outlook.com>
Git commit message Co-Authored-By:
Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-27 13:57:09 -04:00
|
|
|
|
|
|
|
|
# Dedicated coturn (TURN/STUN) droplet for WebRTC mesh voice — provisioned by
|
|
|
|
|
# coturn-playbook.yaml. UNCOMMENT + fill once the droplet + static IP exist
|
|
|
|
|
# (see the playbook header). coturn_secret must equal the app's
|
|
|
|
|
# COTURN_SHARED_SECRET. coturn_private_ip / coturn_tls_* are optional.
|
|
|
|
|
# [coturn]
|
|
|
|
|
# turn.earthmanrpg.me ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519_wsl_python-tdd coturn_secret=CHANGEME coturn_realm=earthmanrpg.me coturn_public_ip=CHANGEME
|