security: add no-new-privileges to docker-compose.yml

docker-compose.yml

@@ -61,6 +61,9 @@ services:
     cap_add:
       - NET_ADMIN
       - SYS_MODULE
+    # Prevent privilege escalation inside the container
+    security_opt:
+      - no-new-privileges:true
     sysctls:
       - net.ipv4.ip_forward=1
       - net.ipv4.conf.all.src_valid_mark=1