From 7e9a83183ffb0e175a48a608ba79847f74eb7c7b Mon Sep 17 00:00:00 2001
From: Roberto D'Auria <roberto@measurementlab.net>
Date: Thu, 1 Aug 2024 17:59:52 +0200
Subject: [PATCH] Add capabilities and -ports flag (#6)

* Add caps and -ports flag

* Remove unneeded DAC_OVERRIDE cap

* Remove unnecessary cap from uuid-annotator.
---
 examples/ndt-fullstack.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/examples/ndt-fullstack.yml b/examples/ndt-fullstack.yml
index 2f03b72..13609ad 100644
--- a/examples/ndt-fullstack.yml
+++ b/examples/ndt-fullstack.yml
@@ -14,6 +14,7 @@ services:
       - -iata=${IATA}
       - -output=/autonode
       - -healthcheck-addr=:8001
+      - -ports=9990,9991,9992,9993
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8001/ready"]
       interval: 3s
@@ -32,6 +33,8 @@ services:
       - ./autocert:/autocert
     cap_drop:
       - ALL
+    cap_add:
+      - NET_BIND_SERVICE
     depends_on:
       generate-schemas-ndt7:
         condition: service_completed_successfully