From aad01f1fc53eb9bdd1fc00ec5f8c783f73e80f56 Mon Sep 17 00:00:00 2001
From: Gerhard Scheikl <linumiq_net-user@linumiq.com>
Date: Sun, 31 May 2026 10:19:06 +0200
Subject: [PATCH] security-update

---
 docker-compose.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 532f53c..b5149c5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -20,12 +20,16 @@ services:
     restart: unless-stopped
     security_opt:
       - no-new-privileges:true
+    cap_drop:
+      - ALL
     env_file:
       - .env.production
     expose:
       - "3000"
     networks:
-      - default
+      default:
+        aliases:
+          - web-prod
     healthcheck:
       test: ["CMD", "wget", "-qO-", "http://127.0.0.1:3000/"]
       interval: 30s