From 57e8c98d29acc54c0aeb3c1ed5099b04bab3795a Mon Sep 17 00:00:00 2001 From: Christoforus Surjoputro Date: Mon, 23 Mar 2026 17:27:24 +0700 Subject: [PATCH] update comment for clarity --- docker/docker-compose.local.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/docker/docker-compose.local.yml b/docker/docker-compose.local.yml index b28b6c406..4fc786a81 100644 --- a/docker/docker-compose.local.yml +++ b/docker/docker-compose.local.yml @@ -14,8 +14,8 @@ services: userns_mode: "keep-id" user: "${UID:-1000}:${GID:-1000}" container_name: picoclaw-agent - # default: turns off SELinux for easier to run and test - # change or remove label=disable on production and employ seccomp policy instead + # Default: SELinux disabled for testing. In production, remove 'label=disable' + # and implement a seccomp profile for better security. security_opt: - label=disable profiles: @@ -25,7 +25,7 @@ services: # - "host.docker.internal:host-gateway" environment: - PICOCLAW_HOME=/home/picoclaw/.picoclaw - # Uncomment to make healtcheck works on podman pod model + # Uncomment for Podman pod health check compatibility # - PICOCLAW_GATEWAY_HOST=0.0.0.0 volumes: - ./data:/home/picoclaw/.picoclaw:Z @@ -44,8 +44,8 @@ services: dockerfile: docker/Dockerfile userns_mode: "keep-id" user: "${UID:-1000}:${GID:-1000}" - # default: turns off SELinux for easier to run and test - # change or remove label=disable on production and employ seccomp policy instead + # Default: SELinux disabled for testing. In production, remove 'label=disable' + # and implement a seccomp profile for better security. security_opt: - label=disable container_name: picoclaw-gateway @@ -57,7 +57,7 @@ services: # - "host.docker.internal:host-gateway" environment: - PICOCLAW_HOME=/home/picoclaw/.picoclaw - # Uncomment to make healtcheck works on podman pod model + # Uncomment for Podman pod health check compatibility # - PICOCLAW_GATEWAY_HOST=0.0.0.0 volumes: - ./data:/home/picoclaw/.picoclaw:Z