fix(coturn): run as root and remove invalid allowed-peer-ip

Coturn image defaults to nobody and cannot read the bind-mounted
entrypoint on stricter hosts (e.g. NAS), causing Permission denied.
The allowed-peer-ip=0.0.0.0/0 CIDR is rejected by coturn as well.

Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>

docker-compose/docker-compose.yml

@@ -80,6 +80,7 @@ services:
     image: ${COTURN_IMAGE:-coturn/coturn:edge-alpine}
     container_name: glkvm_coturn
     restart: always
+    user: "0:0"  # run as root so it can read the bind-mounted entrypoint
     environment:
       # Same semantics as above: prefer explicit value, else auto-detect
       GLKVM_ACCESS_IP: ${GLKVM_ACCESS_IP:-}

docker-compose/templates/turnserver.conf.template

@@ -3,5 +3,4 @@ lt-cred-mech
 user={{TURN_USER}}:{{TURN_PASS}}
 realm=glkvm
 no-multicast-peers
-allowed-peer-ip=0.0.0.0/0
 external-ip={{GLKVM_ACCESS_IP}}