# Wirecore TURN Server Configuration for Tabertron
# coturn configuration file
# Listen on all interfaces
listening-ip=0.0.0.0
# Standard TURN ports
listening-port=3478
tls-listening-port=5349
# External IP - CHANGE THIS to Tabertron's public IP!
# Find it with: curl -4 ifconfig.me
external-ip=CHANGE_ME_TO_YOUR_PUBLIC_IP
# Relay IP (usually same as external IP)
relay-ip=CHANGE_ME_TO_YOUR_PUBLIC_IP
# Realm (your domain or server name)
realm=tabertron.wirecore.local
# Server name
server-name=wirecore-turn
# User credentials - CHANGE THE PASSWORD!
user=wirecore:wirecore2026secure
# Use long-term credentials
lt-cred-mech
# Deny TCP relay, allow UDP only (better for WebRTC)
no-tcp-relay
# Logging
verbose
log-file=/var/log/turnserver/turnserver.log
# UDP relay port range
min-port=49152
max-port=65535
# Security settings
fingerprint
no-multicast-peers
no-cli
# Don't use loopback addresses
no-loopback-peers
# Allow only specific peer IP ranges (comment out to allow all)
# allowed-peer-ip=192.168.0.0/16
# allowed-peer-ip=172.16.0.0/12
# allowed-peer-ip=10.0.0.0/8
# Deny private IP addresses in relay
no-udp-relay
udp-relay
# Mobility support
mobility
# TLS/DTLS settings (optional - for encrypted connections)
# Uncomment if you have SSL certificates
# cert=/etc/letsencrypt/live/yourdomain.com/fullchain.pem
# pkey=/etc/letsencrypt/live/yourdomain.com/privkey.pem