Merge b3b7221e96 into f9d5a9fbc0

docker-compose.override.yml

@@ -12,6 +12,8 @@ services:
       - ./surfsense_web/.env
     depends_on:
       - backend
+    security_opt:
+      - no-new-privileges:true
     environment:
       - NEXT_PUBLIC_API_URL=${NEXT_PUBLIC_API_URL:-http://backend:8000}
 
@@ -25,6 +27,8 @@ services:
       - db
     env_file:
       - ./surfsense_backend/.env
+    security_opt:
+      - no-new-privileges:true
     environment:
       - DATABASE_URL=postgresql+asyncpg://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD:-postgres}@db:5432/${POSTGRES_DB:-surfsense}
       - PYTHONPATH=/app