From dd63598e374141fe98c939746d16532ea3ca4fa8 Mon Sep 17 00:00:00 2001
From: rra <rscmbbng@riseup.net>
Date: Thu, 7 May 2020 16:07:12 +0200
Subject: [PATCH] initial commit of hbsc turnserver.conf

---
 content/downloads/turnserver.conf | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 content/downloads/turnserver.conf

diff --git a/content/downloads/turnserver.conf b/content/downloads/turnserver.conf
new file mode 100644
index 0000000..bf0aa58
--- /dev/null
+++ b/content/downloads/turnserver.conf
@@ -0,0 +1,30 @@
+## Minimal version of /etc/tunserver.conf 
+## For more options and info see the original /etc/turnserver.conf.bak
+
+# Which porst to listen on, make sure the corresponding ports are accepting UDP connections on your firewall
+listening-port=3478
+tls-listening-port=5349
+
+# Your external IP, needed for some connections
+listening-ip=CUSTOMIZE THIS
+
+# Ports that client can connect to. Again make sure they are open for UDP connections on your firewall
+min-port=49152
+max-port=65535
+
+# For the connection with Prosody. Generate a long passphrase for the secret.
+use-auth-secret
+static-auth-secret=CUSTOMIZE THIS
+
+#Let's Encrypt Certificate
+cert=/etc/letsencrypt/live/myserver.org/privkey.pem
+pkey=/etc/letsencrypt/live/myserver.org/privkey.pem
+
+# Log to syslog
+syslog 
+
+# For security:
+prod # disallow server fingerprinting
+no-loopback-peers #dissalow connections on lo interface
+no-cli # disable command-line access
+