## Minimal version of /etc/tunserver.conf 
## For more options and info see the original /etc/turnserver.conf.bak

# Which porst to listen on, make sure the corresponding ports are accepting UDP connections on your firewall
listening-port=3478
tls-listening-port=5349

# Your external IP, needed for some connections
listening-ip=CUSTOMIZE THIS

# Your domain name
realm=myserver.org

# Ports that client can connect to. Again make sure they are open for UDP connections on your firewall
min-port=49152
max-port=65535

# For the connection with Prosody. Generate a long passphrase for the secret.
use-auth-secret
static-auth-secret=CUSTOMIZE THIS

#Paths to Let's Encrypt certificates
cert=/etc/letsencrypt/live/myserver.org/cert.pem
pkey=/etc/letsencrypt/live/myserver.org/privkey.pem

# Log to syslog
syslog 

# For security:
prod # disallow server fingerprinting
no-loopback-peers #dissalow connections on lo interface
no-cli # disable command-line access