Drop capabilities

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2022-09-11 16:27:22 -04:00
parent 2e1c342549
commit aa0705dd6c
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2

View File

@ -26,6 +26,10 @@ services:
- postgres - postgres
networks: networks:
- matrix - matrix
security_opt:
- no-new-privileges:true
cap_drop:
- ALL
postgres: postgres:
image: docker.io/postgres:alpine image: docker.io/postgres:alpine
@ -49,6 +53,14 @@ services:
- ./element-config.json:/app/config.json:Z - ./element-config.json:/app/config.json:Z
networks: networks:
- matrix - matrix
security_opt:
- no-new-privileges:true
cap_drop:
- ALL
cap_add:
- CHOWN
- SETGID
- SETUID
swag: swag:
image: ghcr.io/linuxserver/swag image: ghcr.io/linuxserver/swag
@ -83,6 +95,10 @@ services:
- synapse - synapse
networks: networks:
- matrix - matrix
security_opt:
- no-new-privileges:true
cap_drop:
- ALL
mjolnir: mjolnir:
image: matrixdotorg/mjolnir:latest image: matrixdotorg/mjolnir:latest
@ -94,6 +110,10 @@ services:
- pantalaimon - pantalaimon
networks: networks:
- matrix - matrix
security_opt:
- no-new-privileges:true
cap_drop:
- ALL
networks: networks:
matrix: matrix: