add turn stuff

host_vars/neko.yaml

@@ -13,6 +13,15 @@ firewall:
   - port: "59000:59049"
     proto: udp
     interface: "eth1"
+  - port: "3478"
+    proto: tcp
+    interface: "eth1"
+  - port: "3478"
+    proto: any
+    interface: "eth1"
+  - port: "5349"
+    proto: any
+    interface: "eth1"
   - port: "9101"
     proto: tcp
     interface: "eth0"

roles/neko/files/certbot

@@ -1,4 +1,5 @@
 #! /bin/bash
 systemctl stop haproxy
 certbot renew --standalone --cert-name neko.tormakristof.eu
+certbot renew --standalone --cert-name turn.tormakristof.eu
 systemctl start haproxy

roles/neko/tasks/main.yaml

@@ -27,10 +27,14 @@
     name:
      - python3-certbot
 
-- name: Generate certificate for all proxied domains
+- name: Generate certificate for Neko domain
   command:
     cmd: certbot certonly --non-interactive --agree-tos -m tormakristof@tormakristof.eu --standalone -d neko.tormakristof.eu
 
+- name: Generate certificate for TURN domain
+  command:
+    cmd: certbot certonly --non-interactive --agree-tos -m tormakristof@tormakristof.eu --standalone -d turn.tormakristof.eu
+
 - name: Enable and start haproxy
   service:
     name: haproxy