# Install coturn
apt update && apt install -y coturn
# Edit config
nano /etc/turnserver.conf
# /etc/turnserver.conf
listening-port=3478
tls-listening-port=5349
alt-tls-listening-port=443 # <-- PORT 443: primary for Russia
listening-ip=0.0.0.0
external-ip=YOUR_SERVER_IP
relay-ip=YOUR_SERVER_IP
fingerprint
lt-cred-mech
# Time-limited HMAC credentials (REST API / use-auth-secret).
# This secret MUST match the TURN_AUTH_SECRET app secret.
use-auth-secret=YOUR_STATIC_AUTH_SECRET
realm=nechat.chat
# TLS cert (REQUIRED for port 443 / turns://)
cert=/etc/letsencrypt/live/turn.nechat.chat/fullchain.pem
pkey=/etc/letsencrypt/live/turn.nechat.chat/privkey.pem
log-file=/var/log/coturn/turnserver.log
simple-log
no-multicast-peers
denied-peer-ip=0.0.0.0-0.255.255.255
denied-peer-ip=10.0.0.0-10.255.255.255
denied-peer-ip=172.16.0.0-172.31.255.255
denied-peer-ip=192.168.0.0-192.168.255.255
# Enable and start
echo 'TURNSERVER_ENABLED=1' >> /etc/default/coturn
systemctl enable coturn && systemctl restart coturn
# Open firewall ports
ufw allow 443/tcp # Primary for Russia
ufw allow 3478/udp && ufw allow 3478/tcp
ufw allow 5349/tcp
ufw allow 49152:65535/udp
# Check status
systemctl status coturn