From f30f2ea205f46f4b374fe147a7488e5fc0c86329 Mon Sep 17 00:00:00 2001
From: Martin Winkler <efelon@winklerfamilie.eu>
Date: Tue, 11 Jan 2022 21:49:59 +0100
Subject: [PATCH] New step with setup notes

---
 seqs/coturn.sh | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/seqs/coturn.sh b/seqs/coturn.sh
index 5f36b1b..c578178 100755
--- a/seqs/coturn.sh
+++ b/seqs/coturn.sh
@@ -101,5 +101,34 @@ step_12() {
 ipCronLoc="/etc/cron.d/update_public_ip"
 ipCron="*/5 * * * * root $WDIR/$SCRIPT_FILE -qq updateip"
 
+step_100_info() { echo "Installation notes"; }
+step_100_alias() { ALIAS="notes"; }
+step_100() {
+  outColor green
+  cat <<COTURN_EOF
+# Port forwarding
+
+3478 tcp/udp
+5349 tcp/udp
+
+# Permissions
+
+When using letsencrypt certificates for transport security.
+
+* Add user \`turnserver\` to group \`www-data\`
+
+usermod -aG www-data turnserver
+
+* In the renewal deploy script of cerbot add:
+
+LOC_DOMAIN="yourdoma.in"
+chown root:www-data /etc/letsencrypt/archive
+chmod 750 /etc/letsencrypt/archive
+chown root:www-data /etc/letsencrypt/archive/\$LOC_DOMAIN/privkey*
+chmod g+r /etc/letsencrypt/archive/\$LOC_DOMAIN/privkey*
+
+COTURN_EOF
+}
+
 VERSION_SEQREV=13
 . /usr/local/bin/sequencer.sh