Drop capabilities in a few more places

Continuation of 316d653d3e
2025-06-27 03:37:51 +02:00 · 2019-01-28 11:43:32 +02:00
parent 316d653d3e
commit 9438402f61
8 changed files with 13 additions and 2 deletions
--- a/roles/matrix-postgres/tasks/import_postgres.yml
+++ b/roles/matrix-postgres/tasks/import_postgres.yml
@ -61,6 +61,7 @@
    matrix_postgres_import_command: >-
      /usr/bin/docker run --rm --name matrix-postgres-import
      --user={{ matrix_user_uid }}:{{ matrix_user_gid }}
+      --cap-drop=ALL
      --network={{ matrix_docker_network }}
      --env-file={{ matrix_postgres_base_path }}/env-postgres-psql
      -v {{ server_path_postgres_dump }}:/{{ server_path_postgres_dump|basename }}:ro