pjsip.conf is intentionally preserved across container restarts to protect
device configurations. When the file was created by an older version of the
setup script, or by the non-Docker bare-metal installer, it has no
[transport-tls] section. Asterisk then starts without a TLS transport,
silently, which means nothing listens on port 5061 — causing every mobile
client configured for TLS to fail registration while the server appears
otherwise healthy.
The entrypoint now checks for the presence of [transport-tls] in an existing
pjsip.conf and injects the section (with current NAT/cert settings) if it is
absent. A fresh install is unaffected because pjsip.conf is generated from
scratch with the TLS transport included.
https://claude.ai/code/session_01PTzYWkePEG3tDCMSLfWrXE
Claude
1a3d409d50