Patched docker-compose.yml

patched-codes · May 1, 2024 · ab93e9a · ab93e9a
1 parent 4cb6794
commit ab93e9a
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -9,6 +9,10 @@ services:
       - POSTGRES_DB=postgres
       - POSTGRES_USER=postgres
       - POSTGRES_PASSWORD=postgres
+    security_opt:
+      - "no-new-privileges:true"
+    read_only: true
+
   web:
     build: .
     image: pygoat/pygoat
@@ -20,10 +24,17 @@ services:
     depends_on:
       - migration
       - db
+    security_opt:
+      - "no-new-privileges:true"
+    read_only: true
+
   migration:
     image: pygoat/pygoat
     command: python pygoat/manage.py migrate --noinput
     volumes:
       - .:/app
     depends_on:
       - db
+    security_opt:
+      - "no-new-privileges:true"
+    read_only: true