Slavi Pantaleev
dc9ff4e01b
Add support for external-IP-address-autodetection to Coturn
8 months ago
Slavi Pantaleev
c8e0f35c94
Upgrade Coturn (4.6.2-r4 -> 4.6.2-r5)
8 months ago
Slavi Pantaleev
ce0eb973b0
Upgrade Coturn (4.6.2-r3 -> 4.6.2-r4)
11 months ago
Aine
df07b8fb7d
Update coturn 4.6.1-r3 -> 4.6.2-r3
12 months ago
Slavi Pantaleev
fa63785109
Upgrade Coturn (4.6.1-r2 -> 4.6.1-r3)
1 year ago
Slavi Pantaleev
69b2df629b
Enable some recommended Coturn options in an effort to lower DDoS amplification factor
...
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2592
1 year ago
Slavi Pantaleev
0b9dc56edf
Add type support to matrix_coturn_container_additional_volumes
...
.. and try to auto-switch between `bind` and `volume` depending on
whether there's a slash in the `src` path.
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2482
1 year ago
Aine
f6f7bbd2a1
Update coturn 4.6.1-r1 -> 4.6.1-r2
1 year ago
Slavi Pantaleev
c7767e9bc8
Upgrade Coturn (4.6.1-r0 -> 4.6.1-r1)
1 year ago
Slavi Pantaleev
aafa8f019c
Allow matrix_coturn_docker_network to be set to 'host' to use host-networking
...
This helps large deployments which need to open up thousands of ports
(matrix_coturn_turn_udp_min_port, matrix_coturn_turn_udp_min_port)
On a test VM, opening 1k ports takes 17 seconds for Docker to "publish"
all of these ports (setting up forwarding rules with the firewall, etc),
so service startup and shutdown take a long amount of time.
If host-networking is used, there's no need to open any ports at all
and startup/shutdown can be quick.
1 year ago
Slavi Pantaleev
bb0faa6bc3
Block various private network ranges via denied_peer_ips for Coturn by default
...
Inspired by: https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
1 year ago
Slavi Pantaleev
773cb7d37e
Make no-tcp-relay Coturn configuration property configurable
1 year ago
Slavi Pantaleev
bf23d63f82
Add matrix_coturn_additional_configuration
1 year ago
Slavi Pantaleev
4c9f96722f
Add no-multicast-peers to Coturn config by default
...
Part of a security hardening provoked by:
https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
1 year ago
Slavi Pantaleev
6414599079
Upgrade Coturn (4.6.0 -> 4.6.1)
2 years ago
Slavi Pantaleev
410a915a8a
Move roles/matrix* to roles/custom/matrix*
...
This paves the way for installing other roles into `roles/galaxy` using `ansible-galaxy`,
similar to how it's done in:
- https://github.com/spantaleev/gitea-docker-ansible-deploy
- https://github.com/spantaleev/nextcloud-docker-ansible-deploy
In the near future, we'll be removing a lot of the shared role code from here
and using upstream roles for it. Some of the core `matrix-*` roles have
already been extracted out into other reusable roles:
- https://github.com/devture/com.devture.ansible.role.postgres
- https://github.com/devture/com.devture.ansible.role.systemd_docker_base
- https://github.com/devture/com.devture.ansible.role.timesync
- https://github.com/devture/com.devture.ansible.role.vars_preserver
- https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages
- https://github.com/devture/com.devture.ansible.role.playbook_help
We just need to migrate to those.
2 years ago