From ce05341daecb347b262ad0351488b0cebfbcd070 Mon Sep 17 00:00:00 2001 From: "GL.iNet-Yongping.Xie" Date: Tue, 18 Aug 2026 02:40:00 -0700 Subject: [PATCH] fix(coturn): run as root and remove invalid allowed-peer-ip Coturn image defaults to nobody and cannot read the bind-mounted entrypoint on stricter hosts (e.g. NAS), causing Permission denied. The allowed-peer-ip=0.0.0.0/0 CIDR is rejected by coturn as well. Signed-off-by: GL.iNet-Yongping.Xie --- docker-compose/docker-compose.yml | 1 + docker-compose/templates/turnserver.conf.template | 1 - 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose/docker-compose.yml b/docker-compose/docker-compose.yml index 99a264f..6be0b8d 100755 --- a/docker-compose/docker-compose.yml +++ b/docker-compose/docker-compose.yml @@ -80,6 +80,7 @@ services: image: ${COTURN_IMAGE:-coturn/coturn:edge-alpine} container_name: glkvm_coturn restart: always + user: "0:0" # run as root so it can read the bind-mounted entrypoint environment: # Same semantics as above: prefer explicit value, else auto-detect GLKVM_ACCESS_IP: ${GLKVM_ACCESS_IP:-} diff --git a/docker-compose/templates/turnserver.conf.template b/docker-compose/templates/turnserver.conf.template index 64c503b..6f1ec90 100755 --- a/docker-compose/templates/turnserver.conf.template +++ b/docker-compose/templates/turnserver.conf.template @@ -3,5 +3,4 @@ lt-cred-mech user={{TURN_USER}}:{{TURN_PASS}} realm=glkvm no-multicast-peers -allowed-peer-ip=0.0.0.0/0 external-ip={{GLKVM_ACCESS_IP}}