diff --git a/README.md b/README.md
index ee8a365..b57a4eb 100644
--- a/README.md
+++ b/README.md
@@ -108,7 +108,6 @@ docker-compose -f docker-compose.greenlight.yml up -d
 
 ## Open Tasks
 - add support for recording
-- add coturn support
 - further separate bbb-core into individual container
 - enable IPv6 support
 - fix captions (they don't appear, `readOnlyPadId` is missing)
diff --git a/docker-compose.yml b/docker-compose.yml
index 8468d01..96b4b1b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,6 +10,9 @@ services:
       DOMAIN: ${DOMAIN}
       SHARED_SECRET: ${SHARED_SECRET}
       WELCOME_FOOTER: ${WELCOME_FOOTER}
+      STUN_SERVER: stun:${STUN_IP}:${STUN_PORT}
+      TURN_SERVER: ${TURN_SERVER}
+      TURN_SECRET: ${TURN_SECRET}
     volumes:
       - bigbluebutton:/var/bigbluebutton
     networks:
diff --git a/mod/core/Dockerfile b/mod/core/Dockerfile
index fe131bc..d755859 100644
--- a/mod/core/Dockerfile
+++ b/mod/core/Dockerfile
@@ -59,6 +59,8 @@ COPY red5-webapps/video-broadcast/video-broadcast.properties /usr/share/red5/web
 COPY bigbluebutton.yml /usr/local/bigbluebutton/core/scripts/bigbluebutton.yml
 
 COPY web/bigbluebutton.properties /usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties.tmpl
+COPY web/turn-stun-servers.xml /usr/share/bbb-web/WEB-INF/classes/spring/turn-stun-servers.xml.tmpl
+
 COPY bbb-apps-akka/application.conf /usr/share/bbb-apps-akka/conf/application.conf.tmpl
 COPY bbb-fsesl-akka/application.conf /etc/bbb-fsesl-akka/application.conf
 COPY bbb-transcode-akka/application.conf /etc/bbb-transcode-akka/application.conf
diff --git a/mod/core/entrypoint.sh b/mod/core/entrypoint.sh
index f3c68e6..71e67df 100755
--- a/mod/core/entrypoint.sh
+++ b/mod/core/entrypoint.sh
@@ -19,4 +19,5 @@ chown -R bigbluebutton:bigbluebutton /var/bigbluebutton
 dockerize \
     -template /usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties.tmpl:/usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties \
     -template /usr/share/bbb-apps-akka/conf/application.conf.tmpl:/usr/share/bbb-apps-akka/conf/application.conf \
+    -template /usr/share/bbb-web/WEB-INF/classes/spring/turn-stun-servers.xml.tmpl:/usr/share/bbb-web/WEB-INF/classes/spring/turn-stun-servers.xml \
     /usr/bin/supervisord --nodaemon
diff --git a/mod/core/web/turn-stun-servers.xml b/mod/core/web/turn-stun-servers.xml
new file mode 100644
index 0000000..e97dcab
--- /dev/null
+++ b/mod/core/web/turn-stun-servers.xml
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<beans xmlns="http://www.springframework.org/schema/beans"
+        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+        xsi:schemaLocation="http://www.springframework.org/schema/beans
+        http://www.springframework.org/schema/beans/spring-beans-2.5.xsd">
+
+    <bean id="stun1" class="org.bigbluebutton.web.services.turn.StunServer">
+        <constructor-arg index="0" value="{{ .Env.STUN_SERVER }}"/>
+    </bean>
+
+    {{if .Env.TURN_SERVER }}
+        <bean id="turn0" class="org.bigbluebutton.web.services.turn.TurnServer">
+            <constructor-arg index="0" value="{{ .Env.TURN_SECRET }}"/>
+            <constructor-arg index="1" value="{{ .Env.TURN_SERVER }}"/>
+            <constructor-arg index="2" value="86400"/>
+        </bean>
+    {{end}}
+
+    <bean id="stunTurnService" class="org.bigbluebutton.web.services.turn.StunTurnService">
+        <property name="stunServers">
+            <set>
+                <ref bean="stun1" />
+            </set>
+        </property>
+        <property name="turnServers">
+            <set>
+                {{if .Env.TURN_SERVER }}
+                <ref bean="turn0" />
+                {{end}}
+            </set>
+        </property>
+        <property name="remoteIceCandidates">
+            <set>
+            </set>
+        </property>
+    </bean>
+</beans>
diff --git a/sample.env b/sample.env
index c896cbd..e64f843 100644
--- a/sample.env
+++ b/sample.env
@@ -11,6 +11,11 @@ EXTERNAL_IP=144.76.97.10
 STUN_IP=216.93.246.18
 STUN_PORT=3478
 
+# TURN SERVER
+# uncomment and adjust following two lines to add an external TURN server
+#TURN_SERVER=turns:turn.example.com:443?transport=tcp
+#TURN_SECRET=
+
 SCREENSHARE_EXTENSION_KEY=akgoaoikmbmhcopjgakkcepdgdgkjfbc
 SCREENSHARE_EXTENSION_LINK=https://chrome.google.com/webstore/detail/bigbluebutton-screenshare/akgoaoikmbmhcopjgakkcepdgdgkjfbc