diff --git a/machines/hippocampus/servers/public/matrix/turn.nix b/machines/hippocampus/servers/public/matrix/turn.nix index 39f832c..11e2e84 100644 --- a/machines/hippocampus/servers/public/matrix/turn.nix +++ b/machines/hippocampus/servers/public/matrix/turn.nix @@ -18,6 +18,16 @@ cert = "/var/lib/caddy/.local/share/caddy/certificates/acme.zerossl.com-v2-dv90/turn.glia.club/turn.glia.club.crt"; pkey = "/var/lib/caddy/.local/share/caddy/certificates/acme.zerossl.com-v2-dv90/turn.glia.club/turn.glia.club.key"; }; + services.matrix-tuwunel.settings = { + global = { + turn_uris = [ + "turn:turn.glia.club?transport=udp" + "turn:turn.glia.club?transport=tcp" + ]; + turn_secret = true; + turn_secret_file = config.sops.secrets.coturn-secret.path; + }; + }; services.caddy.virtualHosts = { "turn.glia.club" = { # Use ZeroSSL