From 716c9eb46fd6a80163b8cc4b9700e32d376273d0 Mon Sep 17 00:00:00 2001
From: damencho <damencho@jitsi.org>
Date: Wed, 1 Apr 2020 15:55:18 -0500
Subject: [PATCH] debian: Change coturn unit file to start on 443.

---
 debian/jitsi-meet-turnserver.postinst | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/debian/jitsi-meet-turnserver.postinst b/debian/jitsi-meet-turnserver.postinst
index f408d60c2..1526f7333 100644
--- a/debian/jitsi-meet-turnserver.postinst
+++ b/debian/jitsi-meet-turnserver.postinst
@@ -100,6 +100,13 @@ case "$1" in
         sed -i "s/__turnSecret__/$TURN_SECRET/g" $TURN_CONFIG
         sed -i "s/__external_ip_address__/$JVB_HOSTNAME/g" $TURN_CONFIG
 
+        # Hack Debian Buster coturn to be able to bind privileged port 443
+        COTURN_UNIT_FILE="/lib/systemd/system/coturn.service"
+        if [[ -f $COTURN_UNIT_FILE ]] && ! grep -q "CAP_NET_BIND_SERVICE" "$COTURN_UNIT_FILE" ; then
+            sed -i "s/\[Service\]/\[Service\]\nAmbientCapabilities=CAP_NET_BIND_SERVICE/g" $COTURN_UNIT_FILE
+            systemctl daemon-reload
+        fi
+
         # SSL for nginx
         db_get jitsi-meet/cert-choice
         CERT_CHOICE="$RET"