initial commit - docker stacks

matrix/conduit/conduit.toml

@@ -0,0 +1,9 @@
+[global]
+server_name = "invokesmoke.dev"
+database_path = "/var/lib/tuwunel/db"
+port = [6167]
+address = "0.0.0.0"
+allow_registration = false
+allow_federation = true
+max_request_size = 20_000_000
+trusted_servers = ["matrix.org"]

matrix/coturn/turnserver.conf

@@ -0,0 +1,14 @@
+use-auth-secret
+static-auth-secret=a0c73a93e9a2c134ac3a6746388853d326a59ec384c628916b64118f77706a84
+realm=turn.invokesmoke.dev
+server-name=turn.invokesmoke.dev
+listening-port=3478
+tls-listening-port=5349
+min-port=49152
+max-port=65535
+verbose
+fingerprint
+no-multicast-peers
+denied-peer-ip=10.0.0.0-10.255.255.255
+denied-peer-ip=192.168.0.0-192.168.255.255
+denied-peer-ip=172.16.0.0-172.31.255.255

matrix/docker-compose.yml

@@ -0,0 +1,32 @@
+services:
+  tuwunel:
+    image: jevolk/tuwunel:latest
+    container_name: tuwunel
+    restart: unless-stopped
+    environment:
+      - TUWUNEL_CONFIG=/etc/tuwunel/tuwunel.toml
+    volumes:
+      - tuwunel-data:/var/lib/tuwunel
+      - ./conduit/conduit.toml:/etc/tuwunel/tuwunel.toml:ro
+    networks:
+      - backbone
+
+  coturn:
+    image: coturn/coturn:latest
+    container_name: coturn
+    restart: unless-stopped
+    command:
+      - "--log-file=stdout"
+      - "--external-ip=$(detect-external-ip)"
+    volumes:
+      - ./coturn/turnserver.conf:/etc/coturn/turnserver.conf:ro
+    network_mode: host
+
+volumes:
+  tuwunel-data:
+    external: true
+    name: matrix_tuwunel-data
+
+networks:
+  backbone:
+    external: true