services:
  coturn:
    container_name: coturn
    image: docker.io/coturn/coturn:4-alpine
    network_mode: pasta:-a,${env['pasta']['coturn']['ipv4']},-a,${env['pasta']['coturn']['ipv6']}
    restart: always
    user: ${env['users']['coturn']}:${env['users']['coturn']}
    ports:
      - ${env['ports']['coturn_listening']}:${env['ports']['coturn_listening']}
      - ${env['ports']['coturn_listening']}:${env['ports']['coturn_listening']}/udp
      - ${env['ports']['coturn_tls_listening']}:${env['ports']['coturn_tls_listening']}
      - ${env['ports']['coturn_tls_listening']}:${env['ports']['coturn_tls_listening']}/udp
      - ${env['ports']['coturn_relay_min']}-${env['ports']['coturn_relay_max']}:${env['ports']['coturn_relay_min']}-${env['ports']['coturn_relay_max']}/udp
    tmpfs:
      - /var/lib/coturn
    volumes:
      - ./turnserver.conf.rendered:/etc/coturn/turnserver.conf:ro
      - ${env['certs']['coturn']['cert']}:/etc/coturn/cert.pem:ro
      - ${env['certs']['coturn']['pkey']}:/etc/coturn/pkey.pem:ro