diff --git a/docker-compose/docker-compose.yml b/docker-compose/docker-compose.yml
index 99a264f..6be0b8d 100755
--- a/docker-compose/docker-compose.yml
+++ b/docker-compose/docker-compose.yml
@@ -80,6 +80,7 @@ services:
     image: ${COTURN_IMAGE:-coturn/coturn:edge-alpine}
     container_name: glkvm_coturn
     restart: always
+    user: "0:0"  # run as root so it can read the bind-mounted entrypoint
     environment:
       # Same semantics as above: prefer explicit value, else auto-detect
       GLKVM_ACCESS_IP: ${GLKVM_ACCESS_IP:-}
diff --git a/docker-compose/templates/turnserver.conf.template b/docker-compose/templates/turnserver.conf.template
index 64c503b..6f1ec90 100755
--- a/docker-compose/templates/turnserver.conf.template
+++ b/docker-compose/templates/turnserver.conf.template
@@ -3,5 +3,4 @@ lt-cred-mech
 user={{TURN_USER}}:{{TURN_PASS}}
 realm=glkvm
 no-multicast-peers
-allowed-peer-ip=0.0.0.0/0
 external-ip={{GLKVM_ACCESS_IP}}