fix(deploy): prevent application privilege gains

2026-07-29 13:25:05 +08:00
parent 5a6143097d
commit 0010894f99
6 changed files with 53 additions and 0 deletions
@@ -17,6 +17,8 @@ services:
        NPM_CONFIG_REGISTRY: ${NPM_CONFIG_REGISTRY:-https://registry.npmmirror.com}
    container_name: sub2api-dev
    restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
    ports:
      - "${BIND_HOST:-127.0.0.1}:${SERVER_PORT:-8080}:8080"
    volumes: