security update

docker-compose.yml

@@ -7,7 +7,7 @@
 # .env.production sets WEB_PROJECT / WEB_IMAGE / WEB_CONTAINER / WEB_NETWORK.
 name: ${WEB_PROJECT:-web}
 services:
-  web:
+  web-dev:
     build:
       context: .
       dockerfile: Dockerfile
@@ -20,6 +20,8 @@ services:
     restart: unless-stopped
     security_opt:
       - no-new-privileges:true
+    cap_drop:
+      - ALL
     env_file:
       - .env.production
     expose: