Nextcloud Installation - Part 12 Setup TURN Server for Nextcloud Talk

We setup a TURN server to use with nextcloud TALK APP.

Nextcloud document:

Commands available here:

Config file:

# STUN server port is 3478 for UDP and TCP, and 5349 for TLS.
# Allow connection on the UDP port 3478
#listening-port=3478
# and 5349 for TLS (secure)
tls-listening-port=5349

# Require authentication
fingerprint
lt-cred-mech

# We will use the longterm authentication mechanism, but if
# you want to use the auth-secret mechanism, comment lt-cred-mech and
# uncomment use-auth-secret
#The static auth secret needs to be changed, in this tutorial
# we'll generate a token using OpenSSL
use-auth-secret
static-auth-secret=paste secret
# ----
# If you decide to use use-auth-secret, After saving the changes, change the auth-secret using the following command:
# This will replace the replace-this-secret text on the file with the generated token using openssl.

# Specify the server name and the realm that will be used
# if is your first time configuring, just use the domain as name
server-name=server name
realm=server name

# Important:
# Create a test user if you want
# You can remove this user after testing
#user=guest:somepassword

total-quota=100
stale-nonce=600

# Path to the SSL certificate and private key. In this example we will use
# the letsencrypt generated certificate files.
cert=cert path
pkey=private key path

# Specify the allowed OpenSSL cipher list for TLS/DTLS connections
cipher-list="ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384"

# Specify the process user and group
proc-user=turnserver
proc-group=turnserver

#end

For questions and discussions about errors or if you need further assistance, please join our discussion community at:

[brunokhaas]

The coturn server doesnt open 5349 port in "tls-listening-port". If i declare the same port at "listening-port" it woks

[Trasted]

geek2gether link not available! please fix :)

[tsunix]

Hello! I have VPS where I have Nextcloud running in a docker container. I have configured the TURN server in the same host where I am running the Nextcloud container? Is it possible? Or should I use a different server to configure TURN? I am wondering because in service is up and running but I am not able to configure the TURN server in the Talk configuration. Help please :)

[Guavaya]

Please can I possible install a TURN setup and onlyoffice setup on same EC2 instance? Thanks for the videos once again.

[JohnFilion]

So, I set up a turn server in a virtual machine (proxmox), and I set up my pfSense with a NAT rule and a route rule to direct port 5349 to my turn server. I'm using Traefik as a reverse proxy for Nextcloud, but I did not configure the Turn server to use Traefik, because pfSens is routing the data directly. When I try to connect my turn server in Nextcloud it just spins until it eventually times out. On the coturn server box, I tried running 'systemctl status coturn', and it reports that the server is active (running). But, if I run 'ss -lntu' it shows that I'm listening on port 3478 (I had enabled both stun and turn in the config file), but it doesn't appear to be listening on 5349. Is there a good way for me to determine if the stun server is working?

[Guavaya]

This tutorial should have been "Part 12". You already have part 11 written for the Gmail SSO video