tsbridge + synapse + coturn

[A4alli]

wonder if this is possiable

services:
  synapse:
    image: matrixdotorg/synapse:latest
    container_name: synapse
    volumes:
      - ./synapse_data:/data
    ports:
      - "8008:8008"
    depends_on:
      - synapse-db
    environment:
      - SYNAPSE_SERVER_NAME=matrix.mule-goby.ts.net
      - SYNAPSE_REPORT_STATS=no
    restart: unless-stopped
    networks:
      - tsbridge
    labels:
      - "tsbridge.enabled=true"
      - "tsbridge.service.name=matrix"
      - "tsbridge.service.downstream_headers.X-Frame-Options=DENY"
      - "tsbridge.service.downstream_headers.Strict-Transport-Security=max-age=31536000"
      - "tsbridge.service.write_timeout=0s"
      - "tsbridge.service.flush_interval=-1ms"

  synapse-db:
    image: postgres:15-alpine
    container_name: synapse-db
    restart: unless-stopped
    environment:
      - POSTGRES_USER=xxx
      - POSTGRES_PASSWORD=xxxx
      - POSTGRES_DB=synapse
      - POSTGRES_INITDB_ARGS=--encoding=UTF-8 --lc-collate=C --lc-ctype=C
    volumes:
      - ./synapse-db/schemas:/var/lib/postgresql/data
    networks:
      - tsbridge

  coturn:
    image: coturn/coturn:latest
    container_name: coturn
    volumes:
      - ./coturn.conf:/etc/coturn/turnserver.conf
    restart: unless-stopped
    networks:
      - tsbridge
    ports:
      - "3478:3478/tcp"
      - "3478:3478/udp"
      - "5349:5349/tcp"
      - "5349:5349/udp"
    labels:
      - "tsbridge.enabled=true"
      - "tsbridge.service.name=turn"

  caddy:
    build:
      context: .
      dockerfile: Caddy.Dockerfile
    restart: unless-stopped
    environment:
      MX_DOMAIN: matrix.tailnet.ts.net # Change to your domain ending with .ts.net
    volumes:
      - type: bind
        source: ./Caddyfile
        target: /etc/caddy/Caddyfile
      - type: volume
        source: caddy_certs
        target: /certs
      - type: volume
        source: caddy_data
        target: /data
      - type: volume
        source: caddy_config
        target: /config
    networks:
      - tsbridge

volumes:
  caddy_certs:
  caddy_config:
  caddy_data:

networks:
  tsbridge:
    external: true

coturn.conf

listening-port=3478
tls-listening-port=5349
realm=turn.matrix.tailnet.ts.net
server-name=turn.matrix.tailnet.ts.net
listening-ip=0.0.0.0
relay-ip=0.0.0.0
min-port=49152
max-port=65535
verbose
fingerprint
lt-cred-mech
user=admin:password

homeserver.yaml

server_name: "matrix.mule-goby.ts.net"
pid_file: /data/homeserver.pid
listeners:
  - port: 8008
    tls: false
    type: http
    x_forwarded: true
    resources:
      - names: [client, federation]
        compress: false
database:
  name: psycopg2
  args:
    user: xxx
    password: abc
    database: synapse
    host: synapse-db
    cp_min: 5
    cp_max: 10
log_config: "/data/matrix.tailnet.ts.net.log.config"
media_store_path: /data/media_store
registration_shared_secret: "xxxx"
report_stats: false
macaroon_secret_key: "xxxxxxxxx"
form_secret: "xxxxxxxx"
signing_key_path: "/data/matrix.mule-goby.ts.net.signing.key"
trusted_key_servers:
  - server_name: "matrix.org"
turn_uris:
  - "turn:turn.matrix.tailnet.ts.net:3478?transport=udp"
  - "turn:turn.matrix.tailnet.ts.net:3478?transport=tcp"
  - "turns:turn.matrix.tailnet.ts.net:5349?transport=udp"
  - "turns:turn.matrix.tailnet.ts.net:5349?transport=tcp"
turn_shared_secret: "xxxxxxxx"
turn_user_lifetime: 86400000
turn_allow_guests: true

# vim:ft=yaml

[A4alli]

caddyfile

{
    layer4 {
        127.0.0.1:3478 {
            route {
                proxy {
                    upstream coturn:3478
                }
            }
        }
        127.0.0.1:3479 {
            route {
                proxy {
                    upstream coturn:3479
                }
            }
        }
    }
}

https://{$MX_DOMAIN} {
    reverse_proxy /_matrix/* synapse:8008
    reverse_proxy /_synapse/client/* synapse:8008 {
        header_up X-Forwarded-Proto "https"
        header_up Host {host}
    }
}

http://{$MX_DOMAIN} {
    reverse_proxy /_matrix/* synapse:8008
    reverse_proxy /_synapse/client/* synapse:8008 {
        header_up X-Forwarded-Proto "http"
        header_up Host {host}
    }
}

[A4alli]

i had spin the container but failed to estb TCP. UDP is working wonder how. Is there any way making this this thing to work. As I cannot make audio/video calls without coturn when I share my node to my friends. this Idea i get from nextcloud/all-in-one#5439 But they are using tailscale with caddy sidecar. @jtdowney need your help please

[jtdowney]

tsbridge currently only supports HTTP. Changing this is captured in #75 and discussed a bit in #85.

[A4alli]

thank you. Any timeline for its implementation