浏览代码

fix(dbapi,dblord,dbmaster,rabbitmq,memcached): drop privileges

Peter Thomassen 5 年之前
父节点
当前提交
8f48a8981e
共有 1 个文件被更改,包括 5 次插入0 次删除
  1. 5 0
      docker-compose.yml

+ 5 - 0
docker-compose.yml

@@ -37,6 +37,7 @@ services:
     build: dbapi
     build: dbapi
     image: desec/dedyn-dbapi:latest
     image: desec/dedyn-dbapi:latest
     init: true
     init: true
+    user: mysql:mysql
     volumes:
     volumes:
     - dbapi_mysql:/var/lib/mysql
     - dbapi_mysql:/var/lib/mysql
     environment:
     environment:
@@ -54,6 +55,7 @@ services:
     build: dblord
     build: dblord
     image: desec/dedyn-dblord:latest
     image: desec/dedyn-dblord:latest
     init: true
     init: true
+    user: mysql:mysql
     volumes:
     volumes:
     - dblord_mysql:/var/lib/mysql
     - dblord_mysql:/var/lib/mysql
     environment:
     environment:
@@ -71,6 +73,7 @@ services:
     build: dbmaster
     build: dbmaster
     image: desec/dedyn-dbmaster:latest
     image: desec/dedyn-dbmaster:latest
     init: true
     init: true
+    user: mysql:mysql
     ports:
     ports:
     - "${DESECSTACK_DBMASTER_PORT:-3306}:3306"
     - "${DESECSTACK_DBMASTER_PORT:-3306}:3306"
     volumes:
     volumes:
@@ -199,6 +202,7 @@ services:
   rabbitmq:
   rabbitmq:
     image: rabbitmq:3.8-alpine
     image: rabbitmq:3.8-alpine
     init: true
     init: true
+    user: rabbitmq:rabbitmq
     volumes:
     volumes:
     - rabbitmq_data:/var/lib/rabbitmq
     - rabbitmq_data:/var/lib/rabbitmq
     networks:
     networks:
@@ -249,6 +253,7 @@ services:
   memcached:
   memcached:
     image: memcached:1.5-alpine
     image: memcached:1.5-alpine
     init: true
     init: true
+    user: memcache:memcache
     networks:
     networks:
     - rearapi_celery
     - rearapi_celery
     logging:
     logging: