# coturn

Authenticated TURN for Synapse, exposed through MetalLB at `192.168.0.19`.

The live deployment is managed by Argo CD from
[`homelab-gitops/apps/coturn`](https://code.brunner.ninja/feedc0de/homelab-gitops/src/branch/main/apps/coturn).
That public chart references existing Kubernetes Secrets by name and contains
no credential values. This repository no longer deploys to Kubernetes.

The chart tag follows the deployed Coturn image release. `v4.10.0-r1`
publishes chart `4.10.0-r1`; later chart commits append the Git describe
count and hash.

## Secret bootstrap

The shared TURN secret must exist as `turn-shared-secret` in both the `coturn`
and `matrix` namespaces. For disaster recovery, restore the same 64-character
value with:

```sh
TURN_SHARED_SECRET='<64-character-secret>' ./bootstrap-turn-secret.sh
```

Do not generate different values for the two namespaces. Rotate the shared
credential as a coordinated Coturn/Synapse operation.