42_turn_check.sh

#!/usr/bin/env bash
set -euo pipefail

# 0) Load your .env (via your helper)
source ./90_lib.sh 2>/dev/null || true
type load_env >/dev/null 2>&1 && load_env || {
  # fallback: load .env if 90_lib.sh not available
  set -a; [ -f .env ] && . ./.env; set +a
}

: "${TURN_DOMAIN:?TURN_DOMAIN missing in .env}"
: "${TURN_USER:?TURN_USER missing in .env}"
: "${TURN_PASS:?TURN_PASS missing in .env}"
TURN_PROM_ENABLE="${TURN_PROM_ENABLE:-false}"

echo "TURN_DOMAIN=$TURN_DOMAIN"
echo "TURN_USER=$TURN_USER"
echo "TURN_PROM_ENABLE=$TURN_PROM_ENABLE"
echo

# 1) Does this coturn binary support Prometheus?
echo "== binary feature check =="
if turnserver -h 2>/dev/null | grep -qi prometheus; then
  echo "coturn HAS prometheus support"
else
  echo "coturn has NO prometheus support"
fi
echo

# 2) Is the prometheus directive present in config?
echo "== config check =="
grep -nE '^(listening-port|tls-listening-port|realm|user|prometheus)' /etc/turnserver.conf || true
echo

# 3) Service & listeners
echo "== service & ports =="
systemctl --no-pager --lines=0 status coturn || true
ss -lntup | egrep ':3478|:5349|:9641' || true
echo

# 4) Try metrics (only if enabled in .env AND supported)
if [[ "$TURN_PROM_ENABLE" == "true" ]] && turnserver -h 2>/dev/null | grep -qi prometheus; then
  echo "== prometheus endpoint =="
  if curl -fsS --max-time 2 http://127.0.0.1:9641/ >/dev/null; then
    echo "health: OK"
    echo "--- metrics (first lines) ---"
    curl -fsS --max-time 2 http://127.0.0.1:9641/metrics | head || true
  else
    echo "metrics not reachable on 127.0.0.1:9641"
  fi
  echo
fi

# 5) Functional TURN tests (local VPS works; best from another host for NAT path)
echo "== functional tests =="
echo "-- UDP 3478 --"
turnutils_uclient -v -y -u "$TURN_USER" -w "$TURN_PASS" "$TURN_DOMAIN" || true
echo
echo "-- TLS/TCP 5349 --"
turnutils_uclient -v -t -S -y -u "$TURN_USER" -w "$TURN_PASS" -p 5349 "$TURN_DOMAIN" || true
echo

# 6) TLS certificate quick info
echo "== TLS cert (5349) =="
echo | openssl s_client -connect "${TURN_DOMAIN}:5349" -servername "${TURN_DOMAIN}" 2>/dev/null \
  | openssl x509 -noout -subject -issuer -enddate || true