From e666e12bf2bd33b44ea6dcbf5a657c88b74f55d8 Mon Sep 17 00:00:00 2001
From: Micha <michideheld@gmx.de>
Date: Thu, 26 Mar 2026 15:23:45 +0000
Subject: [PATCH] apps/paperless/docker-compose.yml aktualisiert

---
 apps/paperless/docker-compose.yml | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/apps/paperless/docker-compose.yml b/apps/paperless/docker-compose.yml
index 9023a3b..a13a94a 100644
--- a/apps/paperless/docker-compose.yml
+++ b/apps/paperless/docker-compose.yml
@@ -1,11 +1,11 @@
 version: "3.9"
-
 services:
   paperless:
     image: ghcr.io/paperless-ngx/paperless-ngx:2.20.10
     container_name: paperless-ngx
     restart: unless-stopped
-
+    security_opt:
+      - no-new-privileges:true
     environment:
       - PAPERLESS_TIKA_ENABLED=0
       - PAPERLESS_DBENGINE=postgresql
@@ -13,28 +13,24 @@ services:
       - PAPERLESS_DBNAME=paperless
       - PAPERLESS_DBUSER=paperless
       - PAPERLESS_DBPASS=${PAPERLESS_DBPASS}
-
       - PAPERLESS_REDIS=${PAPERLESS_REDIS}
-
       - PAPERLESS_TIME_ZONE=Europe/Berlin
       - PAPERLESS_OCR_LANGUAGE=deu+eng
       - PAPERLESS_URL=https://paperless.kaleschke.info
-
     volumes:
       - /mnt/user/documents/scans_inbox:/usr/src/paperless/consume
       - /mnt/user/appdata/paperless-ngx/data:/usr/src/paperless/data
       - /mnt/user/documents/paperless/export:/usr/src/paperless/export
       - /mnt/user/documents/paperless:/usr/src/paperless/media
-
     networks:
       - frontend_net
       - backend_net
-
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=frontend_net"
       - "traefik.http.routers.paperless.rule=Host(`paperless.kaleschke.info`)"
       - "traefik.http.routers.paperless.entrypoints=websecure"
+      - "traefik.http.routers.paperless.tls=true"
       - "traefik.http.routers.paperless.tls.certresolver=le"
       - "traefik.http.services.paperless.loadbalancer.server.port=8000"