Harden default Docker Compose security

2026-07-18 17:37:41 +08:00
parent d35f99abfc
commit b76d54aae1
4 changed files with 42 additions and 12 deletions
@@ -6,11 +6,6 @@ x-common-config: &common-config
    - ~/.nanobot:/home/nanobot/.nanobot
  cap_drop:
    - ALL
-  cap_add:
-    - SYS_ADMIN
-  security_opt:
-    - apparmor=unconfined
-    - seccomp=unconfined

 services:
  nanobot-gateway: