Removing TURN server TCP listeners/homeserver.yaml TCP usage

matrix/config/turnserver.conf

@@ -399,7 +399,7 @@ realm=DOMAIN
 # Uncomment if no TCP client listener is desired.
 # By default TCP client listener is always started.
 #
-#no-tcp
+no-tcp
 
 # Uncomment if no TLS client listener is desired.
 # By default TLS client listener is always started.

matrix/install.sh

@@ -34,7 +34,6 @@ ufw allow 8448/tcp
 # Coturn Ports
 ufw allow 3478/tcp
 ufw allow 5443/tcp
-ufw allow 49152:65535/tcp
 ufw allow 49152:65535/udp
 
 # Enable firewall
@@ -103,7 +102,7 @@ user_directory:
 turn_allow_guests: False
 turn_user_lifetime: 86400000
 turn_shared_secret: "${TURN_STATIC_SECRET}"
-turn_uris: [ "turn:${DOMAIN}?transport=udp", "turn:${DOMAIN}?transport=tcp" ]
+turn_uris: [ "turn:${DOMAIN}?transport=udp" ]
 EOF
 
 # Randomly pick a DB password