make changes for working turns

turnserver_example.conf

@@ -1,4 +1,5 @@
 # TURN server name and realm
+# realm can be domain or <IP-ADDRESS>
 realm=<DOMAIN>
 server-name=pairdrop
 
@@ -6,13 +7,18 @@ server-name=pairdrop
 listening-ip=0.0.0.0
 
 # External IP-Address of the TURN server
-# if you have a VPN for example on your Server...
-#external-ip=<IP_ADDRESS>/<OTHER_IP_ADDRESS>
 external-ip=<IP_ADDRESS>
 
+# relay-ip is needed for tls turns connections
+relay-ip=<IP_ADDRESS>
+
 # Main listening port
 listening-port=3478
 
+# 443 for TURN over TLS, which can bypass firewalls
+# the standard-port is 5349
+tls-listening-port=443
+
 # Further ports that are open for communication
 min-port=10000
 max-port=20000
@@ -34,9 +40,13 @@ user=user:password
 lt-cred-mech
 
 # SSL certificates
-cert=/etc/letsencrypt/live/<DOMAIN>/cert.pem
-pkey=/etc/letsencrypt/live/<DOMAIN>/privkey.pem
+cert=/etc/letsencrypt/fullchain.pem
+pkey=/etc/letsencrypt/privkey.pem
+dh-file=/etc/dhparam.pem
 
-# 443 for TURN over TLS, which can bypass firewalls
-# the standard-port is 5349
-tls-listening-port=443
+# For security-reasons disable old ssl and tls-protocols
+no-sslv3
+no-tlsv1
+no-tlsv1_1
+
+stale-nonce=600