Anpassungen und härtung vogenommen

dashy/compose.yml

@@ -3,6 +3,8 @@ services:
     container_name: dashy
     image: lissy93/dashy:latest
     restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
     environment:
       - NODE_ENV=production
       - TZ=Europe/Berlin
@@ -11,8 +13,6 @@ services:
       - /docker/dashy/conf.yml:/app/user-data/conf.yml
     networks:
       - vps_network
-    ports:
-      - 4000:8080
     deploy:
       resources:
         limits:

gateway/compose.yml

@@ -6,7 +6,7 @@ services:
     ports:
       - '80:80'   # HTTP
       - '443:443' # HTTPS
-      - '81:81'   # Admin Dashboard
+      - '127.0.0.1:81:81'   # Admin Dashboard
     environment:
       - DB_SQLITE_FILE=/data/database.sqlite
       - TZ=Europe/Berlin
@@ -32,14 +32,14 @@ services:
     container_name: goaccess
     image: xavierh/goaccess-for-nginxproxymanager:latest
     restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
     environment:
       - TZ=Europe/Berlin
     volumes:
       - /docker/gateway/npm/data/logs:/opt/log:ro
       - /docker/gateway/goaccess/data:/app:rw
       - /docker/gateway/goaccess/configs/goaccess.conf:/opt/goaccess.conf:ro
-    ports:
-      - '7880:7880' # Dashboard-Port für GoAccess
     networks:
       - vps_network
     deploy:

glances/compose.yml

@@ -4,8 +4,6 @@ services:
     container_name: glances
     restart: unless-stopped
     pid: host
-    ports:
-      - 61208:61208
     environment:
       - GLANCES_OPT=-w
       - TZ=Europe/Berlin

uptimekuma/compose.yml

@@ -3,6 +3,8 @@ services:
     image: louislam/uptime-kuma:1
     container_name: uptime_kuma
     restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
     volumes:
       - /docker/uptimekuma/data:/app/data
     networks:

vaultwarden/compose.yml

@@ -3,6 +3,8 @@ services:
     image: vaultwarden/server:latest
     container_name: vaultwarden
     restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
     env_file:
       - .env
     environment: