From ec2797e8d007d272dd6c4813bd970b848eafc3ae Mon Sep 17 00:00:00 2001
From: Florian Kramer <fk@kpt-consulting.de>
Date: Wed, 10 Jun 2026 12:36:52 +0200
Subject: [PATCH] Fix: add apparmor=unconfined for LXC compatibility

---
 docker-compose.deploy.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docker-compose.deploy.yml b/docker-compose.deploy.yml
index 1a87e50..27043b1 100644
--- a/docker-compose.deploy.yml
+++ b/docker-compose.deploy.yml
@@ -1,6 +1,7 @@
 services:
   postgres:
     image: postgres:16-alpine
+    security_opt: [apparmor=unconfined]
     restart: unless-stopped
     volumes:
       - pgdata:/var/lib/postgresql/data
@@ -16,6 +17,7 @@ services:
 
   web:
     build: ./_aufmass_web
+    security_opt: [apparmor=unconfined]
     restart: unless-stopped
     ports:
       - "5000:5000"