diff --git a/docker-compose.yml b/docker-compose.yml
index 802ec08..cecc5ce 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -67,7 +67,8 @@ services:
       - 80:80
     networks:
       - gitea
-    restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
 
 networks:
   gitea: