coturn: wire COTURN_* into app env template (gamearray.env.j2)
COTURN_SHARED_SECRET={{ coturn_secret }} (vault) + literal host/realm. Only the shared secret is sensitive; it must equal the coturn droplet's static-auth-secret. Host/realm are public.
Code architected by Disco DeDisco <discodedisco@outlook.com>
Git commit message Co-Authored-By:
Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -10,4 +10,11 @@ STRIPE_SECRET_KEY={{ stripe_secret_key }}
|
|||||||
CELERY_BROKER_URL=redis://gamearray_redis:6379/0
|
CELERY_BROKER_URL=redis://gamearray_redis:6379/0
|
||||||
REDIS_URL=redis://gamearray_redis:6379/1
|
REDIS_URL=redis://gamearray_redis:6379/1
|
||||||
PYSWISS_URL=https://charts.earthmanrpg.me
|
PYSWISS_URL=https://charts.earthmanrpg.me
|
||||||
|
# coturn / WebRTC voice — only COTURN_SHARED_SECRET is sensitive (it signs the
|
||||||
|
# TURN HMAC creds + must equal the coturn droplet's static-auth-secret). Host +
|
||||||
|
# realm are public. coturn_secret comes from the vault (share it across the app
|
||||||
|
# + coturn host groups, e.g. group_vars/all/vault.yaml, so both plays match).
|
||||||
|
COTURN_SHARED_SECRET={{ coturn_secret }}
|
||||||
|
COTURN_TURN_HOST=turn.earthmanrpg.me
|
||||||
|
COTURN_REALM=earthmanrpg.me
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user