Set volumes to read-only (#6)

P.S. I also forgot to mention line 10 in the issue in which I also set ro.

Signed-off-by: samsepi0l <contact@simpleprivacy.fr>
This commit is contained in:
samsepi0l 2023-12-01 13:44:21 +01:00 committed by GitHub
parent a846be932b
commit cea65fe055
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions

View File

@ -5,9 +5,9 @@ services:
image: nginx:alpine
restart: unless-stopped
volumes:
- ./data/nginx-terminate/nginx.conf:/etc/nginx/nginx.conf:Z
- ./data/certbot/conf:/etc/letsencrypt:z
- ./data/certbot/www:/var/www/certbot:z
- ./data/nginx-terminate/nginx.conf:/etc/nginx/nginx.conf:ro,Z
- ./data/certbot/conf:/etc/letsencrypt:ro,z
- ./data/certbot/www:/var/www/certbot:ro,z
ports:
- "443:443"
- "80:80"
@ -25,7 +25,7 @@ services:
image: nginx:alpine
restart: unless-stopped
volumes:
- ./data/nginx-relay/nginx.conf:/etc/nginx/nginx.conf:Z
- ./data/nginx-relay/nginx.conf:/etc/nginx/nginx.conf:ro,Z
security_opt:
- no-new-privileges:true
cap_drop: