LibrePortal
Sponsor
Install

LibreSTUN

Lets calls connect from anywhere

NetworkingWorks with 8 apps

Your server's own STUN and TURN relay, so video calls connect from anywhere with nothing going to Google

On this page
  1. At a glance
  2. Addresses and ports
  3. Settings
  4. In its config file
  5. Works with
  6. Privacy and security
  7. What leaves this server
  8. What LibrePortal turns off
  9. Sources
  10. Under the hood

Good to know before you install

Your router needs ports 3478 and the relay range forwarded for calls from outside home

At a glance#

What it is
Lets calls connect from anywhere Networking
Where it opens
No web page It works in the background
Updates
Automatic A backup is taken first, and it rolls back if the update fails
Backups
Left out Not in the scheduled backups unless you switch it on
Copies
One per server

There's no step-by-step guide for LibreSTUN here yet. Everything below comes straight from the app catalogue, so it's what LibrePortal really does when you install it. For using LibreSTUN itself, its own documentation is the place to go: github.com/coturn/coturn.

Addresses and ports#

LibreSTUN has 4 ports. LibrePortal picks a free port number for each when you install, so yours will differ from anyone else's. The Config tab's Network section shows them, and the app's Open button uses the right one. "Anyone" means it's reachable from wherever your server is reachable; you can make it private later.

What it isWho can reach itWith a domain
STUN and TURN (UDP) UDP Anyone Port only
STUN and TURN (TCP) TCP Anyone Port only
TURN over TLS TCP Anyone Port only
Call relay ports UDP Anyone Port only

Settings#

In its config file#

LibreSTUN's own settings aren't on the Config tab yet. They live in the app's config file, described here so you know they exist. How to change them.

SettingWhat it doesStarts as
Name
CFG_LIBRESTUN_DISPLAY_NAME		 What this app is called on your dashboards. Leave empty to use its usual name Empty
Show on the LibrePortal Dashboard
CFG_LIBRESTUN_SHOW_ON_DASHBOARD		 Whether this app gets a shortcut on the front page of the LibrePortal WebUI; it has no web page of its own
Choices: true, false		 false
Relay Address Advanced
CFG_LIBRESTUN_ADDRESS		 The address the relay tells callers to use; leave empty for this server's public address (else its LAN address) Empty
TLS Name Advanced
CFG_LIBRESTUN_HOSTNAME		 A name for this server with a certificate, to also offer TURN over TLS on port 5349; leave empty to keep TLS off Empty
Fastest Relay Advanced
CFG_LIBRESTUN_MAX_MBIT		 The most any one relay may carry, in megabits a second 4
Relays Per Login Advanced
CFG_LIBRESTUN_USER_QUOTA		 How many relays one call app login may hold open at once 12
Relays In Total Advanced
CFG_LIBRESTUN_TOTAL_QUOTA		 How many relays the whole server may hold open at once 100
Allowed Private Peers Advanced
CFG_LIBRESTUN_ALLOWED_PEERS		 Private addresses the relay may reach, such as your VPN's range; empty refuses all of them Empty

Works with#

These are the other apps LibreSTUN knows how to work with. Once it's installed, its page shows the same list with whether each one is connected. How this works.

  • Grafana: Shows dashboards for the apps that have one. works with every app
  • Jitsi Meet: Calls connect from anywhere through your own STUN and TURN server, with nothing going to Google.
  • Matrix: Calls connect from anywhere through your own STUN and TURN server, with nothing going to Google.
  • Nextcloud: Calls connect from anywhere through your own STUN and TURN server, with nothing going to Google.
  • PairDrop: Calls connect from anywhere through your own STUN and TURN server, with nothing going to Google.
  • Prometheus: Collects metrics from the apps that can export them. works with every app
  • Stoat: Calls connect from anywhere through your own STUN and TURN server, with nothing going to Google.
  • Uptime Kuma: Watches your apps and shows when one goes down. works with every app

Privacy and security#

All clear LibreSTUN is your own STUN and TURN server. It answers your call apps and contacts nothing outside; every relay needs a short-lived login, and relays can only reach the public internet, never the machines on your network.

What leaves this server#

Nothing leaves this server on its own.

What LibrePortal turns off#

  • Relaying to private, loopback and link-local addresses
  • Open relaying: every relay needs a login made from your server's secret
  • TCP relays to peers, the CLI, NAT behaviour discovery and the version banner

Licence: BSD-3-Clause. Audited: 21 October 2026. See the privacy of every app and the Promise.

Sources#

Under the hood#

  • It runs this image: coturn/coturn:4.18.0@sha256:bbefd3e1fdfdc0d58770fe01b581fd8b00d9f3a5580d00acb77cf719a6bc78e3.
  • It can sit behind Authelia's sign-in once Authelia is installed.
  • Its own project and documentation: github.com/coturn/coturn

Ports, settings, tools and connections on this page are read from LibrePortal v0.10.97's app catalogue each time the guide is built.

Next steps

Every appAll the apps in the App Center, with search and categories.App settingsEvery app page has the same tabs for settings, tools and backups.Apps working togetherWhich apps connect to each other, and how to tell that they do.