Additional hardening for Docker-Compose (#734)

zedeus · Mar 28, 2023 · 78cb405 · 78cb405
1 parent 23f4c61
commit 78cb405
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -17,6 +17,12 @@ services:
  interval: 30s
  timeout: 5s
  retries: 2
+ user: "998:998"
+ read_only: true
+ security_opt:
+ - no-new-privileges:true
+ cap_drop:
+ - ALL
 
  nitter-redis:
  image: redis:6-alpine
@@ -30,6 +36,12 @@ services:
  interval: 30s
  timeout: 5s
  retries: 2
+ user: "999:1000"
+ read_only: true
+ security_opt:
+ - no-new-privileges:true
+ cap_drop:
+ - ALL
 
 volumes:
  nitter-redis: