From d18b49f94b293f383ae5e072c306ea6b716ac7f1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vedran=20Ivankovi=C4=87?=
 <33936733+Veki301@users.noreply.github.com>
Date: Wed, 15 Jan 2025 15:56:16 +0100
Subject: [PATCH] coturn docs update [skip ci]

---
 offline/coturn.md | 28 +++++++++++++++++++++++++---
 1 file changed, 25 insertions(+), 3 deletions(-)

diff --git a/offline/coturn.md b/offline/coturn.md
index 353d6c583..1635e8cd2 100644
--- a/offline/coturn.md
+++ b/offline/coturn.md
@@ -58,14 +58,22 @@ Add the following configuration to the `values.yaml` file:
 # See: https://github.com/wireapp/wire-server/blob/develop/charts/coturn/values.yaml
 # And: https://github.com/wireapp/wire-server/blob/develop/charts/coturn/README.md
 
+# use nodeSelector only if you are planning on using less than 3 pods in your installation and wish to pin coturn to specific nodes
 nodeSelector:
   wire.com/role: coturn
 
-coturnTurnListenIP: '192.168.122.23'
-
+replicaCount: 3
+coturnTurnListenIP: "__COTURN_POD_IP__"
+coturnTurnExternalIP: "__COTURN_EXT_IP__"
+coturnTurnRelayIP: "__COTURN_POD_IP__"
 ```
 
-Where `192.168.122.23` is the IP address of the machine where you want to run Coturn (in our example, the third kubernetes node, `kubenode3`).
+Annotate nodes with the wire.com/external-ip annotation if you are behind 1:1 NAT to make coturn aware of its external IP address.
+
+ie.
+```
+d kubectl annotate node kubenode1 wire.com/external-ip=IP.ADDRESS
+```
 
 ## Create a `secret.yaml` file for the Coturn secrets.
 
@@ -501,6 +509,20 @@ Debug log should now be visible in the coturn pod stdout:
 d kubectl logs coturn-0
 ```
 
+Check if the pod has the correct IP configuration in place.
+
+```bash
+d kubectl exec -it coturn-0 -- bash
+grep ip= coturn-config/turnserver.conf
+
+# output will look something like this
+
+listening-ip=xxx.xxx.xxx.xxx
+relay-ip=xxx.xxx.xxx.xxx.xxx
+external-ip=xxx.xxx.xxx.xxx
+```
+
+
 ## Appendix: Note on migration.
 
 The current guide is written with the assumption that you are setting up Coturn for the first time, on a fresh Wire-Server installation.