Docker Container Security

[stonkage]

Love the project great work!!

I have been able to futher lock down the container (without lost of functionality) using the following and also added a health check

    user: PUID:GUID
    security_opt:
      - no-new-privileges:true
    read_only: true
    cap_drop:
      - ALL
    tmpfs:
      - /tmp
    healthcheck:
      test:
        - CMD
        - wget
        - --spider
        - --timeout=10
        - http://IP:port/
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s

[jordan-dalby]

@stonkage
Nice! Put it in the wiki if you like? "Tightening Security" or something like that?
https://github.com/jordan-dalby/ByteStash/wiki

[stonkage]

done!