Let generate password also generate TURN_CREDENTIALS

env.example

@@ -177,28 +177,6 @@ ETHERPAD_SKIN_VARIANTS="super-light-toolbar super-light-editor light-background
 # Wether to use starttls, implies LDAPv3 and requires ldap:// instead of ldaps://
 # LDAP_START_TLS=1
 
-#
-# eturnal TURN Server configuration
-#
-
-# TURN_CREDENTIALS=super-secret-password
-
-# currently hard coded to 'turn.$LETSENCRYPT_DOMAIN'
-# TURN_HOST=turn.example.com
-
-# currently hard coded
-# TURN_PORT=3478
-
-# currently hard coded to 'turn.$LETSENCRYPT_DOMAIN'
-# TURNS_HOST=turn.example.com
-
-# currently hard coded
-# TURNS_PORT=443
-
-# TURN relay port range
-# TURN_RELAY_MIN_PORT=50000
-# TURN_RELAY_MAX_PORT=50500
-
 #
 # Security
 #
@@ -224,6 +202,31 @@ JIBRI_RECORDER_PASSWORD=
 # XMPP password for Jibri client connections
 JIBRI_XMPP_PASSWORD=
 
+# defines the shared authentication secret used to derive the passwords for ephemeral TURN user names
+# TURN_CREDENTIALS=
+
+
+#
+# eturnal TURN Server configuration
+#
+
+# currently hard coded to 'turn.$LETSENCRYPT_DOMAIN' (in web container)
+# TURN_HOST=turn.example.com
+
+# currently hard coded (in web container)
+# TURN_PORT=3478
+
+# currently hard coded to 'turn.$LETSENCRYPT_DOMAIN' (in web container)
+# TURNS_HOST=turn.example.com
+
+# currently hard coded (in web container)
+# TURNS_PORT=443
+
+# TURN relay port range
+# TURN_RELAY_MIN_PORT=50000
+# TURN_RELAY_MAX_PORT=50500
+
+
 #
 # Docker Compose options
 #
@@ -232,4 +235,4 @@ JIBRI_XMPP_PASSWORD=
 #RESTART_POLICY=unless-stopped
 
 # Jitsi image version (useful for local development)
-#JITSI_IMAGE_VERSION=latest
+#JITSI_IMAGE_VERSION=latest

gen-passwords.sh

@@ -9,11 +9,13 @@ JVB_AUTH_PASSWORD=$(generatePassword)
 JIGASI_XMPP_PASSWORD=$(generatePassword)
 JIBRI_RECORDER_PASSWORD=$(generatePassword)
 JIBRI_XMPP_PASSWORD=$(generatePassword)
+TURN_CREDENTIALS=$(generatePassword)
 
 sed -i.bak \
     -e "s#JICOFO_AUTH_PASSWORD=.*#JICOFO_AUTH_PASSWORD=${JICOFO_AUTH_PASSWORD}#g" \
     -e "s#JVB_AUTH_PASSWORD=.*#JVB_AUTH_PASSWORD=${JVB_AUTH_PASSWORD}#g" \
     -e "s#JIGASI_XMPP_PASSWORD=.*#JIGASI_XMPP_PASSWORD=${JIGASI_XMPP_PASSWORD}#g" \
     -e "s#JIBRI_RECORDER_PASSWORD=.*#JIBRI_RECORDER_PASSWORD=${JIBRI_RECORDER_PASSWORD}#g" \
     -e "s#JIBRI_XMPP_PASSWORD=.*#JIBRI_XMPP_PASSWORD=${JIBRI_XMPP_PASSWORD}#g" \
+    -e "s#TURN_CREDENTIALS=.*#TURN_CREDENTIALS=${TURN_CREDENTIALS}#g" \
     "$(dirname "$0")/.env"