Add CAP_KILL capability and remove stop_grace_period
- Add KILL to cap_add for graceful shutdown with init systems (s6/s6-overlay) - Remove stop_grace_period (no longer needed with CAP_KILL) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
@@ -10,10 +10,11 @@ services:
|
|||||||
cap_drop:
|
cap_drop:
|
||||||
- ALL
|
- ALL
|
||||||
cap_add:
|
cap_add:
|
||||||
- CHOWN # Config file ownership
|
- KILL
|
||||||
- SETUID # User switching in entrypoint
|
- CHOWN
|
||||||
- SETGID # Group switching in entrypoint
|
- SETUID
|
||||||
- DAC_OVERRIDE # Permission override for config files
|
- SETGID
|
||||||
|
- DAC_OVERRIDE
|
||||||
|
|
||||||
# Resource Limits
|
# Resource Limits
|
||||||
deploy:
|
deploy:
|
||||||
@@ -26,8 +27,6 @@ services:
|
|||||||
memory: 256M
|
memory: 256M
|
||||||
cpus: '0.25'
|
cpus: '0.25'
|
||||||
|
|
||||||
stop_grace_period: 15s
|
|
||||||
|
|
||||||
# macvlan Network - HomeKit mDNS Discovery
|
# macvlan Network - HomeKit mDNS Discovery
|
||||||
networks:
|
networks:
|
||||||
docker_macvlan:
|
docker_macvlan:
|
||||||
|
|||||||
Reference in New Issue
Block a user