Jitsi and CoTURN in Docker

How to set up jitsi and coturn in docker on the same host? Do I need a jitsi turn server if it is behind NAT. Are ports 443, 10000 and 3478 enough?

TURNS is needed when the peers cannot connect directly to each other (in case of P2P) or when the user cannot connect directly to JVB through UDP/10000.

In COTURNS logs:
realm user <>: incoming packet message processed, error 401: Unauthorized

Configure an external TURN server

TURN_CREDENTIALS=12345ecret
TURN_HOST=XX.XX.XX.My_IP_TURN
TURN_PORT=3478
TURNS_HOST=XX.XX.XX.My_IP_TURN
TURNS_PORT=3478

docker-compose.yml COTURN

#COTURN
coturn:
    build: .
    image: flaviostutz/coturn
    container_name: coturn
    restart: unless-stopped
    #network_mode: host
    environment:
        - PUBLIC_IP=XX.XX.XX.MY-IP_TURN
        - TURN_USERNAME=coturn
        - TURN_PASSWORD=12345
        - TURN_PORT=3478
    ports:
        - 3478:3478
        - 3478:3478/udp

where my error? Where i need enter login of COTURN in JITSI ENV?