fix(deploy): prevent application privilege gains

2026-10-14 03:52:26 +08:00 · 2026-07-29 13:25:05 +08:00
parent 5a6143097d
commit 0010894f99
6 changed files with 53 additions and 0 deletions
@@ -27,6 +27,8 @@ services:
    image: weishaw/sub2api:latest
    container_name: sub2api
    restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
    ulimits:
      nofile:
        soft: 100000