Drop all capabilities

This commit is contained in:
niten 2023-07-22 12:25:21 -07:00
parent 8a85d5c69f
commit 6cf055b0e6

View File

@ -26,7 +26,7 @@ let
ports = [ "4000:4000" ];
user = "${toString teslaMateUid}:${toString teslaMateUid}";
env_file = [ teslaMateEnvFile ];
cap_drop = "all";
capabilities.ALL = false;
};
};
postgres = {