From f1e0b92f4793f955e37ead79abd2c89e15decb0a Mon Sep 17 00:00:00 2001 From: Marcel Date: Sun, 17 May 2026 18:54:24 +0200 Subject: [PATCH] style(ocr): normalize cap_drop to block notation in docker-compose.yml Aligns with the block sequence style used in docker-compose.prod.yml and the rest of the compose file, removing the inline [ALL] inconsistency. Co-Authored-By: Claude Sonnet 4.6 --- docker-compose.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index 53a1cf97..91f8bbda 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -112,7 +112,8 @@ services: read_only: true tmpfs: - /tmp:size=512m # training endpoints write ZIPs to /tmp; 512 MB covers typical batches (20–50 images) - cap_drop: [ALL] + cap_drop: + - ALL security_opt: - no-new-privileges:true