Drop capabilities in a few more places

Continuation of 316d653d3e
2025-06-27 19:57:51 +02:00 · 2019-01-28 11:43:32 +02:00
parent 316d653d3e
commit 9438402f61
8 changed files with 13 additions and 2 deletions
--- a/roles/matrix-postgres/tasks/upgrade_postgres.yml
+++ b/roles/matrix-postgres/tasks/upgrade_postgres.yml
@ -106,6 +106,7 @@
  command: |
    /usr/bin/docker run --rm --name matrix-postgres-import \
    --user={{ matrix_user_uid }}:{{ matrix_user_gid }} \
+    --cap-drop=ALL \
    --network={{ matrix_docker_network }} \
    --env-file={{ matrix_postgres_base_path }}/env-postgres-psql \
    -v {{ postgres_dump_dir }}:/in:ro \