oxofrmbl/jitsi-meet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(turn): emit TURN_CREDENTIALS too (Prosody key name) — was missing the secret value in external_services config
All checks were successful
deploy / deploy (push) Successful in 22s
Details

Browse Source
This commit is contained in:
Dennis Paradzinski 2026-05-13 14:53:28 +02:00
parent ed27e707a2
commit 94e3cea153
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
infra/k3s/20-secrets.yaml.example
View File

@ -27,5 +27,9 @@ stringData:
JWT_APP_SECRET: "REPLACE_WITH_VALUE_FROM_EMBERTIME" JWT_APP_SECRET: "REPLACE_WITH_VALUE_FROM_EMBERTIME"
# HMAC secret shared between coturn and Prosody. Prosody mints # HMAC secret shared between coturn and Prosody. Prosody mints
# time-limited TURN credentials; coturn validates with the same key. # time-limited TURN credentials; coturn validates with the same key.
# Generate fresh via generate-secrets.sh. # Set under BOTH key names — same value:
# - TURN_CREDENTIALS (Prosody mod_external_services convention)
# - TURN_CREDENTIALS_SECRET (coturn / our manifest convention)
# generate-secrets.sh writes both for you.
TURN_CREDENTIALS: "REPLACE_WITH_32_RANDOM_CHARS"
TURN_CREDENTIALS_SECRET: "REPLACE_WITH_32_RANDOM_CHARS" TURN_CREDENTIALS_SECRET: "REPLACE_WITH_32_RANDOM_CHARS"

4
scripts/generate-secrets.sh
View File

@ -32,5 +32,9 @@ stringData:
JICOFO_AUTH_PASSWORD: "${JICOFO_AUTH_PASSWORD}" JICOFO_AUTH_PASSWORD: "${JICOFO_AUTH_PASSWORD}"
JVB_AUTH_USER: "jvb" JVB_AUTH_USER: "jvb"
JVB_AUTH_PASSWORD: "${JVB_AUTH_PASSWORD}" JVB_AUTH_PASSWORD: "${JVB_AUTH_PASSWORD}"
# Same HMAC value under two keys: Prosody's mod_external_services
# template reads TURN_CREDENTIALS; coturn's start-script reads
# TURN_CREDENTIALS_SECRET. Both must match.
TURN_CREDENTIALS: "${TURN_CREDENTIALS_SECRET}"
TURN_CREDENTIALS_SECRET: "${TURN_CREDENTIALS_SECRET}" TURN_CREDENTIALS_SECRET: "${TURN_CREDENTIALS_SECRET}"
EOF EOF