Drop all capabilities

This commit is contained in:
niten 2023-07-22 12:25:21 -07:00
parent 8a85d5c69f
commit 6cf055b0e6

View File

@ -26,7 +26,7 @@ let
ports = [ "4000:4000" ]; ports = [ "4000:4000" ];
user = "${toString teslaMateUid}:${toString teslaMateUid}"; user = "${toString teslaMateUid}:${toString teslaMateUid}";
env_file = [ teslaMateEnvFile ]; env_file = [ teslaMateEnvFile ];
cap_drop = "all"; capabilities.ALL = false;
}; };
}; };
postgres = { postgres = {