search

jeremyckahn / chitchatter

Secure peer-to-peer chat that is serverless, decentralized, and ephemeral
https://chitchatter.im/
GNU General Public License v2.0
1.4k stars 163 forks source link

Request: Ability to set TURN server credentials as env variables #270

Open dillfrescott opened 2 months ago

dillfrescott commented 2 months ago

I believe this would be a good feature for selfhosters, because it avoids github scrapers from using up all my allotted bandwidth lol

dillfrescott commented 2 months ago

I use vercel for deploying Chitchatter, so maybe something compatible with that

jeremyckahn commented 2 months ago

This seems like a worthwhile addition to Chitchatter, but I don't know that it will solve the problem of scrapers from using your TURN credentials. Those credentials are baked into the built assets and are available publicly, so they'd just have to adjust their methods a bit to get what they're looking for.

To truly secure TURN credentials, we'd need some sort of API that provides temporary TURN credentials (similar to a session token). I think something like Twilio's Network Traversal product can provide this, but that's not something that Chitchatter currently supports.

All that said, I think this could be useful for the sake of configuration, so I'll leave this issue open.

dillfrescott commented 2 months ago

Ohhh okay gotcha