Additional hardening for Docker-Compose (#734)

2023-03-28 10:20:07 -04:00 · 2023-03-28 10:20:07 -04:00 · 78cb405acd
commit 78cb405acd
parent 23f4c6114c
1 changed files with 12 additions and 0 deletions
--- a/docker-compose.yml
+++ b/docker-compose.yml
@ -17,6 +17,12 @@ services:
      interval: 30s
      timeout: 5s
      retries: 2
+    user: "998:998"
+    read_only: true
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL

  nitter-redis:
    image: redis:6-alpine
@ -30,6 +36,12 @@ services:
      interval: 30s
      timeout: 5s
      retries: 2
+    user: "999:1000"
+    read_only: true
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL

 volumes:
  nitter-redis: