From c9cdcfd6b3b0290aa868a1c43dd147f9eab273cb Mon Sep 17 00:00:00 2001
From: Tim Kaufmann <tim@timkaufmann.de>
Date: Sun, 2 Nov 2025 23:24:18 +0000
Subject: [PATCH] Add CAP_KILL capability and remove stop_grace_period
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Add KILL to cap_add for graceful shutdown with init systems (s6/s6-overlay)
- Remove stop_grace_period (no longer needed with CAP_KILL)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 docker-compose.yaml | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/docker-compose.yaml b/docker-compose.yaml
index 669248e..a1bb377 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -10,10 +10,11 @@ services:
     cap_drop:
       - ALL
     cap_add:
-      - CHOWN           # Config file ownership
-      - SETUID          # User switching in entrypoint
-      - SETGID          # Group switching in entrypoint
-      - DAC_OVERRIDE    # Permission override for config files
+      - KILL
+      - CHOWN
+      - SETUID
+      - SETGID
+      - DAC_OVERRIDE
 
     # Resource Limits
     deploy:
@@ -26,8 +27,6 @@ services:
           memory: 256M
           cpus: '0.25'
 
-    stop_grace_period: 15s
-
     # macvlan Network - HomeKit mDNS Discovery
     networks:
       docker_macvlan: