Claude
854261bf98
The coturn/coturn Docker image is Alpine-based and doesn't include iproute2 (which provides ss). This caused the healthcheck to fail immediately, marking coturn as unhealthy and preventing the asterisk container from starting due to its service_healthy dependency. Alpine's busybox includes netstat, so use that instead. https://claude.ai/code/session_01Vm6NLaQuzM4VosAotqS1q8
115 lines
4.1 KiB
YAML
115 lines
4.1 KiB
YAML
# ================================================================
|
|
# Easy Asterisk - Docker Compose
|
|
#
|
|
# Usage:
|
|
# docker compose up -d # Start everything
|
|
# docker exec -it easy-asterisk easy-asterisk # Interactive management
|
|
# docker exec -it easy-asterisk vpn-diagnostics # VPN diagnostics
|
|
#
|
|
# All clients connect via FQDN (TLS) regardless of their network.
|
|
# coturn provides STUN (NAT detection) + TURN (media relay) so calls
|
|
# work even behind strict firewalls, cellular NAT, or VPNs like Proton.
|
|
# ================================================================
|
|
|
|
services:
|
|
|
|
# ── Asterisk PBX ───────────────────────────────────────────
|
|
asterisk:
|
|
build: .
|
|
container_name: easy-asterisk
|
|
# Host networking required for:
|
|
# - RTP media ports (10000-20000 UDP) - too many to map individually
|
|
# - Proper NAT detection and SIP Contact headers
|
|
# - Direct access to coturn on localhost
|
|
network_mode: host
|
|
depends_on:
|
|
coturn:
|
|
condition: service_healthy
|
|
volumes:
|
|
- asterisk-config:/etc/asterisk
|
|
- easy-asterisk-config:/etc/easy-asterisk
|
|
- asterisk-logs:/var/log/asterisk
|
|
- asterisk-spool:/var/spool/asterisk
|
|
- asterisk-lib:/var/lib/asterisk
|
|
environment:
|
|
# ── Domain (REQUIRED for remote access) ──
|
|
# Your FQDN that points to this server's public IP
|
|
- DOMAIN_NAME=${DOMAIN_NAME:?Set DOMAIN_NAME in .env}
|
|
- ENABLE_TLS=${ENABLE_TLS:-y}
|
|
|
|
# ── Public IP ──
|
|
# Auto-detected if empty. Set manually if detection fails.
|
|
- PUBLIC_IP=${PUBLIC_IP:-}
|
|
|
|
# ── Local Network ──
|
|
- LOCAL_CIDR=${LOCAL_CIDR:-}
|
|
|
|
# ── Additional Subnets ──
|
|
# Space-separated CIDRs for VLANs, site-to-site VPNs, etc.
|
|
# NOT needed for client-side VPNs (Proton, NordVPN) - TURN handles those
|
|
- HAS_VLANS=${HAS_VLANS:-n}
|
|
- VLAN_SUBNETS=${VLAN_SUBNETS:-}
|
|
|
|
# ── TURN/STUN Server ──
|
|
# Points to the coturn service (auto-configured)
|
|
- TURN_ENABLED=y
|
|
- TURN_SERVER=${DOMAIN_NAME:?}:3478
|
|
- TURN_USERNAME=${TURN_USERNAME:-easyasterisk}
|
|
- TURN_PASSWORD=${TURN_PASSWORD:-}
|
|
|
|
# ── RTP Port Range ──
|
|
- RTP_START=${RTP_START:-10000}
|
|
- RTP_END=${RTP_END:-20000}
|
|
|
|
# ── Web Admin ──
|
|
- WEB_ADMIN_PORT=${WEB_ADMIN_PORT:-8080}
|
|
- WEB_ADMIN_AUTH_DISABLED=${WEB_ADMIN_AUTH_DISABLED:-false}
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD", "asterisk", "-rx", "core show version"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
|
|
# ── TURN/STUN Relay Server (coturn) ──────────────────────────
|
|
# Provides:
|
|
# STUN - Tells clients their public IP (NAT detection)
|
|
# TURN - Relays media when direct UDP paths are blocked
|
|
# (corporate firewalls, cellular NAT, Proton VPN, etc.)
|
|
#
|
|
# Without TURN, calls work "sometimes" - with TURN, they always work.
|
|
coturn:
|
|
image: coturn/coturn:latest
|
|
container_name: easy-asterisk-coturn
|
|
network_mode: host
|
|
entrypoint: ["/bin/sh", "-c"]
|
|
command:
|
|
- |
|
|
# Build coturn arguments
|
|
ARGS="-n --listening-port=3478 --fingerprint --lt-cred-mech"
|
|
ARGS="$$ARGS --user=${TURN_USERNAME:-easyasterisk}:${TURN_PASSWORD:-changeme}"
|
|
ARGS="$$ARGS --realm=${DOMAIN_NAME:-localhost}"
|
|
ARGS="$$ARGS --min-port=${TURN_RELAY_MIN:-49152}"
|
|
ARGS="$$ARGS --max-port=${TURN_RELAY_MAX:-49252}"
|
|
# Only add external-ip if PUBLIC_IP is set
|
|
if [ -n "${PUBLIC_IP:-}" ]; then
|
|
ARGS="$$ARGS --external-ip=${PUBLIC_IP}"
|
|
fi
|
|
ARGS="$$ARGS --no-tls --no-dtls --no-cli"
|
|
ARGS="$$ARGS --no-multicast-peers --no-loopback-peers"
|
|
ARGS="$$ARGS --log-file=stdout"
|
|
exec turnserver $$ARGS
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "netstat -uln | grep -q ':3478'"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
|
|
volumes:
|
|
asterisk-config:
|
|
easy-asterisk-config:
|
|
asterisk-logs:
|
|
asterisk-spool:
|
|
asterisk-lib:
|