# Screener self-hosted STUN-only configuration.
# Target: coturn 4.17.2 or a newer patched release.
# Copy this file outside the repository and restrict it to the coturn service
# account. No application secret or relay port range is required.

# Ordinary peer ICE uses UDP STUN discovery only. Coturn documents `stun-only`
# as ignoring every TURN request, so this listener cannot allocate media relays.
listening-port=3478
stun-only
no-tcp
no-tls

# Keep automatic address selection on a single-homed public host. On a
# multi-homed host, bind only the intended public interface.
#listening-ip=<PUBLIC_LISTEN_IP>

fingerprint
no-cli

# Let the service supervisor apply bounded retention. Do not enable verbose or
# log-binding in normal production; STUN logs can contain client IP addresses.
log-file=stdout
log-min-level=info
new-log-timestamp
pidfile=/run/coturn/turnserver.pid