From 9bd985044ad8bd0612360bcaa9f4d871b6195985 Mon Sep 17 00:00:00 2001
From: Jan Friedli <jan.friedli@immerda.ch>
Date: Sun, 12 Apr 2020 16:08:52 +0200
Subject: [PATCH] updated docker run

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 04b863f..0b32068 100644
--- a/README.md
+++ b/README.md
@@ -195,7 +195,7 @@ repository: https://0xacab.org/jvoisin/mat2-web/container_registry
 ### Building the production image
 Build command: `docker build -f Dockerfile.production -t mat-web .`
 
-Run it: `docker run -ti -p8181:8080 --read-only  --tmpfs /tmp --tmpfs /run/uwsgi --tmpfs=/app/upload  mat-web:latest`
+Run it: `docker run -ti -p8181:8080 --read-only  --tmpfs /tmp --tmpfs /run/uwsgi --tmpfs=/app/upload --security-opt=no-new-privileges --security-opt=seccomp=./config/seccomp.json mat-web:latest`
 
 This does mount the upload folder as tmpfs and servers the app on `localhost:8181`.