From 77c20840adfea304a969241c34ef2e337e157f0c Mon Sep 17 00:00:00 2001
From: agusev <audetv@gmail.com>
Date: Mon, 27 Mar 2023 23:24:04 +0300
Subject: [PATCH] Remove unsupported options security_opt, removed redis ports
 from prod

---
 docker-compose-production.yml | 18 ------------------
 docker-compose.yml            |  2 --
 2 files changed, 20 deletions(-)

diff --git a/docker-compose-production.yml b/docker-compose-production.yml
index c3b59e89..08d1f051 100644
--- a/docker-compose-production.yml
+++ b/docker-compose-production.yml
@@ -2,8 +2,6 @@ version: "3.9"
 services:
   cron:
     image: crazymax/swarm-cronjob:latest
-    security_opt:
-      - no-new-privileges:true
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     environment:
@@ -14,8 +12,6 @@ services:
 
   frontend:
     image: ${REGISTRY}/fct-search-frontend:${IMAGE_TAG}
-    security_opt:
-      - no-new-privileges:true
     networks:
       - traefik-public
       - default
@@ -71,8 +67,6 @@ services:
 
   app-migration:
     image: ${REGISTRY}/fct-search-cli-php:${IMAGE_TAG}
-    security_opt:
-      - no-new-privileges:true
     environment:
       APP_ENV: prod
       APP_DEBUG: 0
@@ -109,8 +103,6 @@ services:
 
   fct-parser:
     image: ${REGISTRY}/fct-search-parser:main-2
-    security_opt:
-      - no-new-privileges:true
     volumes:
       - parsed-files:/app/parsed-files
 #    command: './fct-parser -j -h -a'
@@ -127,8 +119,6 @@ services:
 
   app-updater:
     image: ${REGISTRY}/fct-search-cli-php:${IMAGE_TAG}
-    security_opt:
-      - no-new-privileges:true
     environment:
       APP_ENV: prod
       APP_DEBUG: 0
@@ -173,8 +163,6 @@ services:
 
   app-postgres:
     image: postgres:15.1-alpine
-    security_opt:
-      - no-new-privileges:true
     environment:
       POSTGRES_USER: ${APP_POSTGRES_USER}
       POSTGRES_PASSWORD_FILE: /run/secrets/app_db_password
@@ -190,8 +178,6 @@ services:
 
   manticore:
     image: manticoresearch/manticore
-    security_opt:
-      - no-new-privileges:true
     ulimits:
       nproc: 65535
       nofile:
@@ -212,12 +198,8 @@ services:
 
   redis:
     image: redis:7.0.10
-    ports:
-      - "6379:6379"
     secrets:
       - redis_password
-    security_opt:
-      - no-new-privileges:true
     command: sh -c 'redis-server --save 60 1 --requirepass  "$$(cat /run/secrets/redis_password)"'
     volumes:
       - session-cache:/data
diff --git a/docker-compose.yml b/docker-compose.yml
index 6585e935..2ea4d141 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -146,8 +146,6 @@ services:
       - "6379:6379"
     secrets:
       - redis_password
-    security_opt:
-      - no-new-privileges:true
     command: sh -c 'redis-server --save 60 1 --requirepass  "$$(cat /run/secrets/redis_password)"'
     volumes:
       - session-cache:/data