traefik: set no-new-privileges=true

2025-01-03 13:53:33 +01:00 · 2025-01-03 13:53:33 +01:00 · c13845aec3
commit c13845aec3
parent e9caffddfc
1 changed files with 2 additions and 0 deletions
--- a/docker-compose/traefik/docker-compose.yml.j2
+++ b/docker-compose/traefik/docker-compose.yml.j2
@ -7,6 +7,8 @@ services:
    image: "traefik:v3.2.3"
    restart: unless-stopped
    pull_policy: missing
+    security_opt:
+      - no-new-privileges=true
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik.yml:/etc/traefik/traefik.yml