updated config files for voice

deploy_matrix.yml

@@ -181,7 +181,7 @@
 
     - name: Start Synapse container
       containers.podman.podman_container:
-        name: synapse
+        name: synapse "{{ matrix_container_name }}"
         image: "{{ synapse_image }}"
         state: started
         ports:

templates/homeserver.yaml.j2

@@ -11,13 +11,14 @@ listeners:
     type: http
     x_forwarded: true
 
-turn:
+turn_uris:
-  uris:
+    - "turn:"{{ matrix_container_name }}":"{{ turn_listen_port }}"?transport=udp"
-    - "turn:{{ matrix_domain1 }}:{{ turn_listen_port }}?transport=udp"
+    - "turn:"{{ matrix_container_name }}":"{{ turn_tls_port }}"?transport=tcp"
-    - "turn:{{ matrix_domain1 }}:{{ turn_tls_port }}?transport=tcp"
+    - "turns:"{{ matrix_container_name }}":"{{ turn_tls_port }}"?transport=tcp"
-    - "turns:{{ matrix_domain1 }}:{{ turn_tls_port }}?transport=tcp"
+    - "turns:{{ matrix_container_name }}":"{{ turn_listen_port }}"?transport=udp"
+
 turn_shared_secret: "{{ turn_secret }}"
-  turn_user_lifetime: "86400000"   # 1 day in ms (optional)
+turn_user_lifetime: "1h" 
 
 
 media_store_path: /data/media_store

templates/turnserver.conf.j2

@@ -1,18 +1,14 @@
-listening-port={{ turn_listen_port }}
+syslog
-tls-listening-port={{ turn_tls_port }}
 
-realm={{ matrix_domain1 }}
+lt-cred-mech
-static-auth-secret={{ turn_secret }}
+use-auth-secret
+static-auth-secret="{{ turn_static_secret }}"
+realm="{{ matrix_domain1 }}"
 
-# If your host sits behind NAT and you need to force the public IP, uncomment:
+# cert=/etc/letsencrypt/live/turn.example.org/fullchain.pem
-# external-ip={{ public_ipv4 }}
+# pkey=/etc/letsencrypt/live/turn.example.org/privkey.pem
 
-allowed-peer-ip=0.0.0.0/0
+no-udp
-
+external-ip="{{ public_ipv4 }}"
-listening-ip=0.0.0.0
+min-port=64000
-listening-ip=::0
+max-port=65535
-
-log-file=/var/log/turnserver.log
-verbose
-
-shared-secret="{{ turn_secret }}"

vars/vars.yml

@@ -7,6 +7,7 @@ landing_domain: "org.fpov.space"
 teamspeak_domain: "ts.fpov.space"     
 matrix_email: "boxswappers@gmail.com"
 
+
 # --------------------------------------------------------------
 # Ports
 # --------------------------------------------------------------
@@ -17,6 +18,7 @@ traefik_https_port: 443
 turn_listen_port: 3478
 turn_tls_port: 5349
 turn_secret: "7A9F2C4E1B8D6035A2F7E9C1B4D68053"
+turn_static_secret: "fordeathyoudietoday"
 
 # --- Synapse ----------------------------------------------------
 synapse_http_port: 8008
@@ -26,10 +28,11 @@ synapse_api_port: 8448
 registration_shared_secret: "1KFs@=d&l6BGPD0GAwa55ePu+bF7Vgtk@~x#l3tQyKl#_q0etp"
 macaroon_secret_key: "5GongrU~_kQ9L1-f.nU21sdiz~e63+Wwq;iS7XdPA2giDqZ#xH"
 form_secret: "Ubwo=AThaygGi0iySK*H4i9xUOORCQM#eDMd@E,DqW3DcfqYJG"
+matrix_container_name: "matrix"
 
 # --- Teamspeak ---------------------------------------------------
 teamspeak_image: "docker.io/teamspeak:3.13.7"
-teamspeak_container_name: teamspeak
+teamspeak_container_name: synapse
 teamspeak_udp_port: 9987          # voice (UDP) – exposed directly on the host
 teamspeak_tcp_port: 10011         # query (TCP) – will be routed via Traefik
 teamspeak_file_port: 30033        # file‑transfer (TCP) – optional, expose directly