From b0759757466bdb263d981779b3a9b63bc40a8123 Mon Sep 17 00:00:00 2001
From: jtricerolph <info@tricerolph.com>
Date: Wed, 1 Jul 2026 13:28:52 +0000
Subject: [PATCH] Docker-in-LXC: security_opt apparmor=unconfined (all
 services)

---
 docker-compose.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 3565b01..95bf91f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,8 @@
 services:
   uptime-kuma:
     image: louislam/uptime-kuma:1
+    security_opt:
+      - apparmor=unconfined
     volumes:
       - kuma_data:/app/data
     ports:
@@ -9,6 +11,8 @@ services:
 
   updater:
     build: ./updater
+    security_opt:
+      - apparmor=unconfined
     environment:
       - WEBHOOK_SECRET=${WEBHOOK_SECRET}
       - SSH_KEY_PATH=/root/.ssh/id_ed25519
@@ -20,6 +24,8 @@ services:
 
   backup:
     image: postgres:16-alpine
+    security_opt:
+      - apparmor=unconfined
     entrypoint: ["/bin/sh", "-c", "crond -f -l 8"]
     environment:
       - BACKUP_DATABASES=${BACKUP_DATABASES}