Drop all capabilities
This commit is contained in:
@@ -26,7 +26,7 @@ let
|
|||||||
ports = [ "4000:4000" ];
|
ports = [ "4000:4000" ];
|
||||||
user = "${toString teslaMateUid}:${toString teslaMateUid}";
|
user = "${toString teslaMateUid}:${toString teslaMateUid}";
|
||||||
env_file = [ teslaMateEnvFile ];
|
env_file = [ teslaMateEnvFile ];
|
||||||
cap_drop = "all";
|
capabilities.ALL = false;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
postgres = {
|
postgres = {
|
||||||
|
|||||||
Reference in New Issue
Block a user