turn: change to individual roles

ansible/inventory/runa.yml

@@ -14,10 +14,10 @@ runa:
       hosts:
         mtx-turn-1.ankr.corp-services.app:
           docker_compose:
-            - coturn
+            - turn1
         mtx-turn-2.ankr.corp-services.app:
           docker_compose:
-            - coturn
+            - turn2
     lat:
       hosts:
         mtx-elem-1.lat.internal.ru.com:

ansible/roles/docker-compose/files/turn1/turnserver.conf

@@ -1,4 +1,4 @@
-realm=turn.corp-serv.net
+realm=turn-1.corp-serv.net
 no-tcp-relay
 listening-ip=0.0.0.0
 listening-port=3478

ansible/roles/docker-compose/files/turn2/docker-compose.yaml

@@ -0,0 +1,12 @@
+version: '3.8'
+services:
+  coturn:
+    image: coturn/coturn:latest
+    restart: unless-stopped
+    network_mode: "host"
+    volumes:
+      - ./turnserver.conf:/etc/turnserver.conf
+      - ./coturn/privkey.pem:/etc/ssl/private/privkey.pem:ro
+      - ./coturn/cert.pem:/etc/ssl/certs/cert.pem:ro
+      - ./nginx:/etc/nginx/conf.d
+      - /ssl:/ssl

ansible/roles/docker-compose/files/turn2/turnserver.conf

@@ -0,0 +1,16 @@
+realm=turn-2.corp-serv.net
+no-tcp-relay
+listening-ip=0.0.0.0
+listening-port=3478
+min-port=49152
+max-port=65535
+
+log-file=stdout
+verbose
+pidfile=/var/tmp/turnserver.pid
+use-auth-secret
+static-auth-secret=ihaaCac6Oow3ohzuvequ6esoo9eegheex
+
+tls-listening-port=5349
+pkey=/ssl/certificate.keyplain
+cert=/ssl/chain.crt