docker-compose: fix some security things

4dbb2afb · Mark Tyneway · Andreas Bigger · dbedfe3c · 4dbb2afb
Commit 4dbb2afb authored Jul 31, 2023 by Mark Tyneway Committed by Andreas Bigger Aug 02, 2023
Show whitespace changes
Inline Side-by-side

Showing with 3 additions and 1 deletion

docker-compose.yml ops-bedrock/docker-compose.yml +3 -1

No files found.
--- a/ops-bedrock/docker-compose.yml
+++ b/ops-bedrock/docker-compose.yml
@@ -139,7 +139,9 @@ services:
    ports:
      - "8080:80"
    volumes:
-      - "${PWD}/../.devnet/:/usr/share/nginx/html/"
+      - "${PWD}/../.devnet/:/usr/share/nginx/html/:ro"
+    security_opt:
+      - "no-new-privileges:true"

  stateviz:
    build: