XMPP: audio/video call support (prosody)
__ __ __ __ ___ ___ _
\ \/ / | \/ | | _ \ | _ \ (_)
> < | |\/| | | _/ | _/ _
/_/\_\ |_| |_| |_| |_| (_)
_ _ __ _ _
__ _ _ _ __| | (_) ___ / / __ __ (_) __| | ___ ___
/ _` | | || | / _` | | | / _ \ / / \ V / | | / _` | / -_) / _ \
\__,_| \_,_| \__,_| |_| \___/ /_/ \_/ |_| \__,_| \___| \___/
_ _
__ __ _ | | | |
/ _| / _` | | | | |
\__| \__,_| |_| |_|
_
___ _ _ _ __ _ __ ___ _ _ | |_
(_-< | || | | '_ \ | '_ \ / _ \ | '_| | _|
/__/ \_,_| | .__/ | .__/ \___/ |_| \__|
|_| |_|
__ _ __
/ / _ __ _ _ ___ ___ ___ __| | _ _ \ \
| | | '_ \ | '_| / _ \ (_-< / _ \ / _` | | || | | |
| | | .__/ |_| \___/ /__/ \___/ \__,_| \_, | | |
\_\ |_| |__/ /_/
╔─*──*──*──*──*──*──*──*──*──*──*──*──*──*──*──*─╗
║1 ........................................ 1║
║2* ........................................ *2║
║3 ........................................ 3║
║1 ...........Posted: 2025-03-09........... 1║
║2* ...Tags: sysadmin linux xmpp prosody ... *2║
║3 ........................................ 3║
║1 ........................................ 1║
╚────────────────────────────────────────────────╝
Some sloppy notes for you about how to enable audio/video calling for a prosody
server in debian.
https://prosody.im/doc/turn
https://gist.github.com/iNPUTmice/a28c438d9bbf3f4a3d4c663ffaa224d9
This is an extension of my other article
reliability of calls bad, basically not work
prosody stun/turn testing:
https://prosody.im/doc/turn#testing-your-setup also
prosodyctl check turn
sudo apt-get update sudo apt-get install coturn
vi /etc/turnserver.conf
i set `realm=xmpp.someodd.zip` uncommented `use-auth-secret` then set
`static-auth-secret` to some gibberish set by keepassxc.
then `sudo systemctl restart coturn`
sudo ufw allow 3478,5349/tcp comment 'Allow TURN server TCP ports' sudo ufw
allow 3478,5349/udp comment 'Allow TURN server UDP ports'
dont' forget forward ports router
## prosody
sudo vi /etc/prosody/prosody.cfg.lua
i actually just uncommented `turn_external` in the `modules_enabled` section.
then i had to set `turn_external_host` to `xmpp.someodd.zip` and use the secret
i set earlier in `turn_external_secret`.
then i think you can use sudo prosodyctl reload OR systemctl reload prosody
baudrillard@simulacra ~ % sudo prosodyctl check turn Identified 1 TURN services.
Testing TURN service xmpp.someodd.zip:3478... 1 warnings:
```
STUN returned a private IP! Is the TURN server behind a NAT and misconfigured?
```
Success!
All checks passed, congratulations!
sudo journalctl -u coturn
sudo prosodyctl check turn -v --ping=stun.conversations.im
baudrillard@simulacra ~ % sudo prosodyctl check turn -v
--ping=stun.conversations.im Identified 1 TURN services.
Testing TURN service xmpp.someodd.zip:3478... 2 warnings:
```
STUN returned a private IP! Is the TURN server behind a NAT and misconfigured?
TURN external IP vs relay address mismatch! Is the TURN server behind a NAT and misconfigured?
```
External IP: 192.168.1.1 Relayed address 1: 192.168.1.100:50367 TURN external
address: 24.130.51.197:50367 Success!
All checks passed, congratulations!
# further debugging
https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/ you
have to edit /etc/turnserver.conf and sudo systemctl restart coturn and
# Uncomment to use long-term credential mechanism.
# By default no credentials mechanism is used (any user allowed).
#
#lt-cred-mech #user=testuser:testpassword
i feel like i'm still having issues between clients. dino works best?
