main.yml

---
coturn_install_state: "present"
coturn_listening_port: 3478
coturn_min_port: 32769
coturn_max_port: 65535
coturn_listening_ip: "{{ ansible_host }}"
coturn_user_quota: 0
coturn_total_quota: 0
# You need to set the same static authentification secret
# for this coturn instance here *and* in BigBlueButton
# (obviously, never use the default).
coturn_static_auth_secret: 1234

# You should specify the realm of you coturn (see turnserver
# config options), otherwise it defaults to the host domain name.
# coturn_realm:

# The tls variables should all be defined if you set
# coturn_use_tls to true (recommended).
coturn_use_tls: true
coturn_tls_listening_port: 443
# If you use tls you need to define the directory where
# your tls certificate files are located
# (e.g. /etc/letsencrypt or /etc/nginx/ssl).
coturn_tls_cert_dir:
# If you use tls you need to specify the full name and path
# to the tls certificate and key files.
coturn_tls_cert:
coturn_tls_key:
# You can specify the coturn tls_group (optional).
# coturn_tls_group:

coturn_denied_peer_ips:
  - 0.0.0.0-0.255.255.255
  - 10.0.0.0-10.255.255.255
  - 100.64.0.0-100.127.255.255
  - 127.0.0.0-127.255.255.255
  - 169.254.0.0-169.254.255.255
  - 172.16.0.0-172.31.255.255
  - 192.0.0.0-192.0.0.255
  - 192.0.2.0-192.0.2.255
  - 192.88.99.0-192.88.99.255
  - 192.168.0.0-192.168.255.255
  - 198.18.0.0-198.19.255.255
  - 198.51.100.0-198.51.100.255
  - 203.0.113.0-203.0.113.255
  - 240.0.0.0-255.255.255.255

# 1 for verbose, 2 for Verbose (very verbose)
coturn_verbosity: 0

# coturn username on the host
turn_user: "{{ 'coturn' if ansible_os_family == 'RedHat' else 'turnserver' }}"