From f89e41bce3d0764162d6140006e4c29b3eb2cdc4 Mon Sep 17 00:00:00 2001
From: nchebrov <nchebrov@mail.ru>
Date: Thu, 18 Dec 2025 17:45:03 +0000
Subject: [PATCH] =?UTF-8?q?=D0=9E=D0=B1=D0=BD=D0=BE=D0=B2=D0=B8=D1=82?=
 =?UTF-8?q?=D1=8C=20docker-compose.yml?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docker-compose.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index b60cf12..0c669db 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -3,6 +3,10 @@ version: '3.8'
 services:
   mostlymatter:
     build: .
+    security_opt:
+      - no-new-privileges
+    cap_drop:
+      -  ALL  
     container_name: mostlymatter
     ports:
       - "8065:8065"
@@ -18,10 +22,15 @@ services:
       - ./data:/mattermost/data
       - ./logs:/mattermost/logs
       - ./config:/mattermost/config
+    user: "1001:1001"
     restart: unless-stopped
 
   db:
     image: postgres:15-alpine
+    security_opt:
+      - no-new-privileges
+    cap_drop:
+      -  ALL
     container_name: mostlymatter_db
     environment:
       - POSTGRES_USER=mostlymatter