wip

docker-compose.yml

@@ -5,6 +5,9 @@ services:
     build:
       context: .
       dockerfile: Containerfile
+      args:
+        USER_ID: 1000
+        GROUP_ID: 1000
     container_name: gocheck-container
     ports:
       - "${PORT:-8080}:8080"
@@ -13,6 +16,9 @@ services:
     volumes:
       - gocheck-data:/app
     restart: unless-stopped
+    # Rootless Podman compatibility
+    security_opt:
+      - no-new-privileges:true
     healthcheck:
       test: [ "CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/" ]
       interval: 30s