diff --git a/dashy/compose.yml b/dashy/compose.yml index b614c43..0fe61f4 100644 --- a/dashy/compose.yml +++ b/dashy/compose.yml @@ -3,6 +3,8 @@ services: container_name: dashy image: lissy93/dashy:latest restart: unless-stopped + security_opt: + - no-new-privileges:true environment: - NODE_ENV=production - TZ=Europe/Berlin @@ -11,8 +13,6 @@ services: - /docker/dashy/conf.yml:/app/user-data/conf.yml networks: - vps_network - ports: - - 4000:8080 deploy: resources: limits: diff --git a/gateway/compose.yml b/gateway/compose.yml index a3b4936..5fa5852 100644 --- a/gateway/compose.yml +++ b/gateway/compose.yml @@ -6,7 +6,7 @@ services: ports: - '80:80' # HTTP - '443:443' # HTTPS - - '81:81' # Admin Dashboard + - '127.0.0.1:81:81' # Admin Dashboard environment: - DB_SQLITE_FILE=/data/database.sqlite - TZ=Europe/Berlin @@ -32,14 +32,14 @@ services: container_name: goaccess image: xavierh/goaccess-for-nginxproxymanager:latest restart: unless-stopped + security_opt: + - no-new-privileges:true environment: - TZ=Europe/Berlin volumes: - /docker/gateway/npm/data/logs:/opt/log:ro - /docker/gateway/goaccess/data:/app:rw - /docker/gateway/goaccess/configs/goaccess.conf:/opt/goaccess.conf:ro - ports: - - '7880:7880' # Dashboard-Port für GoAccess networks: - vps_network deploy: diff --git a/glances/compose.yml b/glances/compose.yml index 479083b..dfcd77b 100644 --- a/glances/compose.yml +++ b/glances/compose.yml @@ -4,8 +4,6 @@ services: container_name: glances restart: unless-stopped pid: host - ports: - - 61208:61208 environment: - GLANCES_OPT=-w - TZ=Europe/Berlin diff --git a/uptimekuma/compose.yml b/uptimekuma/compose.yml index 2d6261a..9bd9f9e 100644 --- a/uptimekuma/compose.yml +++ b/uptimekuma/compose.yml @@ -3,6 +3,8 @@ services: image: louislam/uptime-kuma:1 container_name: uptime_kuma restart: unless-stopped + security_opt: + - no-new-privileges:true volumes: - /docker/uptimekuma/data:/app/data networks: diff --git a/vaultwarden/compose.yml b/vaultwarden/compose.yml index 3574ca2..62133c2 100644 --- a/vaultwarden/compose.yml +++ b/vaultwarden/compose.yml @@ -3,6 +3,8 @@ services: image: vaultwarden/server:latest container_name: vaultwarden restart: unless-stopped + security_opt: + - no-new-privileges:true env_file: - .env environment: