Gossa

version: '2'

services:
  gossa-server:
    image: docker.io/pldubouilh/gossa:latest
    container_name: gossa
    restart: always
    read_only: true
    # uncomment to set the user
    # user: "1000:1000"
    # userns_mode: "keep-id" # uncomment if using rootless podman as well as the x-podman directive at the bottom
    # environment:
      #- READONLY=true # uncomment to set gossa as read only
      # - UID=1000 # this should match the user set above
      # - GID=1000 # this should match the user's group
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
# ...