From 46b2f1d7342a8618d407d7dc2217a675d8687937 Mon Sep 17 00:00:00 2001
From: Such a big pebble <156148427+BigPebble123@users.noreply.github.com>
Date: Mon, 28 Apr 2025 19:11:15 +0200
Subject: [PATCH] Add security_opt and new restart policy to docker-compose
 options (#693)

* Add anchored docker-compose security options

* Remove YAML anchor and AppArmor profile

---------

Co-authored-by: BigPebble123 <>
Co-authored-by: Alexander Medvedev <lilalexmed@proton.me>
---
 docker-compose.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index fc2119d4d..3e421d6fe 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,6 +10,9 @@ services:
       - ./data:/pumpkin
       # Use the following, if you want to make your config immutable
       #- ./config:/pumpkin/config:ro
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
     stdin_open: true
     tty: true
     cap_drop: