nix-config/hosts
mikl 3d2f432619 heather: add coturn TURN relay for jitsi (clients behind symmetric NAT)
- coturn/coturn:4.7 in host network (real client IPs, NAT traversal)
- static-auth-secret shared with jitsi-web TURN_CREDENTIALS (in jitsi.env)
- RTP relay 49152-65535/udp, listening-port 3478
- realm turn.iscg.dev, external-ip 51.250.45.111
- no-tls/no-dtls (TLS on 5349 disabled, udp-only for now)
- jitsi-web env: TURN_HOST/PORT/TRANSPORT
- NixOS firewall: 3478 tcp+udp, 49152-65535/udp range
- YC SG already has 3478/5349/49152-65535 from initial setup
2026-07-13 01:19:55 +03:00
..
common heather/common: passwordless sudo for mikl + fix deprecated options 2026-07-11 22:55:00 +03:00
heather heather: add coturn TURN relay for jitsi (clients behind symmetric NAT) 2026-07-13 01:19:55 +03:00
poppy heather/common: passwordless sudo for mikl + fix deprecated options 2026-07-11 22:55:00 +03:00
rosemary initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00