From def09c441c30097acd14eca1ee200a4712b8d683 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Thu, 9 Apr 2026 11:00:01 +0000
Subject: [PATCH] fix: fix: generate_compose() must add security_opt
 apparmor=unconfined to all services (#492)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 lib/generators.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lib/generators.sh b/lib/generators.sh
index 80386d2..7bec327 100644
--- a/lib/generators.sh
+++ b/lib/generators.sh
@@ -93,6 +93,8 @@ services:
     restart: unless-stopped
     network_mode: host
     privileged: true
+    security_opt:
+      - apparmor=unconfined
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     environment:
@@ -174,6 +176,8 @@ services:
   edge:
     build: ./docker/edge
     container_name: disinto-edge
+    security_opt:
+      - apparmor=unconfined
     ports:
       - "80:80"
       - "443:443"
@@ -204,6 +208,8 @@ services:
   staging:
     image: caddy:alpine
     command: ["caddy", "file-server", "--root", "/srv/site"]
+    security_opt:
+      - apparmor=unconfined
     volumes:
       - ./docker:/srv/site:ro
     networks: