docker-compose: drop capabilities

CHANGELOG.md

@@ -6,7 +6,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 ### Changed
-- docker-compose: use custom container name "ipfs" instead of auto-generated "[PROJECT_NAME]_ipfs_1"
+- docker-compose: use custom container name "ipfs" instead of auto-generated "\[PROJECT_NAME\]_ipfs_1"
+- docker-compose: drop capabilities
 
 ## [0.2.2] - 2020-09-24
 ### Fixed

docker-compose.yml

@@ -13,6 +13,7 @@ services:
     ports:
     - '4001:4001'
     - '127.0.0.1:5001:5001'
+    cap_drop: [ALL]
     security_opt: [no-new-privileges]
     restart: unless-stopped