relay

type Credentials struct {
	Username   string   `json:"username" example:"1767225600:3:42:k1"`
	Password   string   `json:"password" example:"dGVzdC1obWFjLXNhbXBsZS12YWx1ZQ=="`
	TTLSeconds int64    `json:"ttl" example:"600"`
	Realm      string   `json:"realm" example:"ggscale"`
	URLs       []string `json:"urls,omitempty" example:"turn:relay.example.com:3478?transport=udp"`
	Region     string   `json:"region" example:"us-east"`
	STUNURLs   []string `json:"stun_urls,omitempty" example:"stun:stun.example.com:3478"`
}

type Issuer struct {
	// contains filtered or unexported fields
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerConfig struct {
	PublicIP    string
	BindAddr    string // host portion of the bind address; empty -> 0.0.0.0
	BindPort    int    // UDP port
	TCPPort     int    // TURN-over-TCP port; 0 disables
	TLSPort     int    // TURNS (TLS) port; 0 disables
	TLSCertFile string // required when TLSPort != 0
	TLSKeyFile  string // required when TLSPort != 0
	// RelayMinPort/RelayMaxPort bound the UDP ports allocated for relayed
	// media. Both 0 (the default) allocates from the OS ephemeral range;
	// setting a range lets the firewall open only those ports. The range width
	// caps the number of concurrent relay allocations.
	RelayMinPort int
	RelayMaxPort int
	// MaxAllocations caps concurrently-live relay allocations node-wide,
	// bounding port-range exhaustion from a single credential. 0 = unlimited.
	MaxAllocations int
	// PlayerAllocPerMinute/PlayerAllocBurst throttle authenticated allocations
	// per player so one credential can't monopolise the global pool. <=0 disables.
	PlayerAllocPerMinute int
	PlayerAllocBurst     int
	// AllowPrivatePeers lets clients relay to loopback/RFC1918/link-local/ULA
	// peer addresses. Default false: the relay refuses to proxy into private
	// space, so a valid credential can't turn the node into an SSRF hop to
	// internal services. Set true only for a self-host relay that legitimately
	// bridges private peers on a trusted network.
	AllowPrivatePeers bool
	// Logger receives the pion server's internal events; nil uses slog.Default.
	Logger *slog.Logger
	Issuer *Issuer
}