Files
Ben YounesandOra Agent 11d2736d86 Support file-backed username/credential for external TURN servers (#4784)
turn_servers already accepts secret_file for the dynamic (static-auth-secret)
mechanism, but the static username/credential pair could only be written inline
in the config, forcing deployments that mount secrets as files to inline them.

Add username_file and credential_file, resolved through a single helper shared
with secret_file: the inline value wins when both are set, file contents are
trimmed, an empty file fails startup, and credential_file must not be readable
by others. username_file carries no permission requirement because the username
is not a secret.

Co-authored-by: Ora Agent <noreply@oratelecom.net>
2026-10-19 16:00:00 +08:00
..