listening-port=3478
tls-listening-port=5349
fingerprint
lt-cred-mech
use-auth-secret
static-auth-secret=poc-test-secret-not-for-prod
realm=turns.example.test

# Self-signed cert generated by cert-init container at first compose up.
# cert-init writes to shared volume poc-aprime-coturn-cert mounted at /etc/coturn/cert.
cert=/etc/coturn/cert/cert.pem
pkey=/etc/coturn/cert/key.pem

no-dtls
cipher-list="ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384"
no-tlsv1
no-tlsv1_1
no-rfc5780

no-tcp-relay
denied-peer-ip=10.0.0.0-10.255.255.255
denied-peer-ip=172.16.0.0-172.31.255.255
denied-peer-ip=192.168.0.0-192.168.255.255
min-port=49152
max-port=65535
no-cli