coturn: wire COTURN_* into app env template (gamearray.env.j2)

COTURN_SHARED_SECRET={{ coturn_secret }} (vault) + literal host/realm. Only the shared secret is sensitive; it must equal the coturn droplet's static-auth-secret. Host/realm are public.

Code architected by Disco DeDisco <discodedisco@outlook.com>
Git commit message Co-Authored-By:
Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Disco DeDisco
2026-05-27 14:16:33 -04:00
parent c9a61e5614
commit 68239ac5d4

View File

@@ -10,4 +10,11 @@ STRIPE_SECRET_KEY={{ stripe_secret_key }}
CELERY_BROKER_URL=redis://gamearray_redis:6379/0
REDIS_URL=redis://gamearray_redis:6379/1
PYSWISS_URL=https://charts.earthmanrpg.me
# coturn / WebRTC voice — only COTURN_SHARED_SECRET is sensitive (it signs the
# TURN HMAC creds + must equal the coturn droplet's static-auth-secret). Host +
# realm are public. coturn_secret comes from the vault (share it across the app
# + coturn host groups, e.g. group_vars/all/vault.yaml, so both plays match).
COTURN_SHARED_SECRET={{ coturn_secret }}
COTURN_TURN_HOST=turn.earthmanrpg.me
COTURN_REALM=earthmanrpg.me