From 47998d1efc112ccd52aaff78b8ee9c4f002108b4 Mon Sep 17 00:00:00 2001
From: Miguel Gagliardo <migag9@gmail.com>
Date: Thu, 28 Mar 2024 22:54:58 +0000
Subject: [PATCH] Removing TURN server TCP listeners/homeserver.yaml TCP usage

---
 matrix/config/turnserver.conf | 2 +-
 matrix/install.sh             | 3 +--
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/matrix/config/turnserver.conf b/matrix/config/turnserver.conf
index 5779d6a..104942a 100644
--- a/matrix/config/turnserver.conf
+++ b/matrix/config/turnserver.conf
@@ -399,7 +399,7 @@ realm=DOMAIN
 # Uncomment if no TCP client listener is desired.
 # By default TCP client listener is always started.
 #
-#no-tcp
+no-tcp
 
 # Uncomment if no TLS client listener is desired.
 # By default TLS client listener is always started.
diff --git a/matrix/install.sh b/matrix/install.sh
index 7820824..2974f99 100755
--- a/matrix/install.sh
+++ b/matrix/install.sh
@@ -34,7 +34,6 @@ ufw allow 8448/tcp
 # Coturn Ports
 ufw allow 3478/tcp
 ufw allow 5443/tcp
-ufw allow 49152:65535/tcp
 ufw allow 49152:65535/udp
 
 # Enable firewall
@@ -103,7 +102,7 @@ user_directory:
 turn_allow_guests: False
 turn_user_lifetime: 86400000
 turn_shared_secret: "${TURN_STATIC_SECRET}"
-turn_uris: [ "turn:${DOMAIN}?transport=udp", "turn:${DOMAIN}?transport=tcp" ]
+turn_uris: [ "turn:${DOMAIN}?transport=udp" ]
 EOF
 
 # Randomly pick a DB password