nix-config/hosts/heather
mikl 3d2f432619 heather: add coturn TURN relay for jitsi (clients behind symmetric NAT)
- coturn/coturn:4.7 in host network (real client IPs, NAT traversal)
- static-auth-secret shared with jitsi-web TURN_CREDENTIALS (in jitsi.env)
- RTP relay 49152-65535/udp, listening-port 3478
- realm turn.iscg.dev, external-ip 51.250.45.111
- no-tls/no-dtls (TLS on 5349 disabled, udp-only for now)
- jitsi-web env: TURN_HOST/PORT/TRANSPORT
- NixOS firewall: 3478 tcp+udp, 49152-65535/udp range
- YC SG already has 3478/5349/49152-65535 from initial setup
2026-07-13 01:19:55 +03:00
..
arion-compose.nix heather: add coturn TURN relay for jitsi (clients behind symmetric NAT) 2026-07-13 01:19:55 +03:00
caddy.nix heather: install jitsi from scratch per official docs (minimal) 2026-07-13 00:56:13 +03:00
default.nix heather: add coturn TURN relay for jitsi (clients behind symmetric NAT) 2026-07-13 01:19:55 +03:00
docker.nix heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
image.nix heather/common: passwordless sudo for mikl + fix deprecated options 2026-07-11 22:55:00 +03:00
syncthing.nix heather: make strelaysrv private (pools="") 2026-07-12 17:55:52 +03:00