second

docker-compose.yaml

@@ -10,6 +10,20 @@ services:
       - ./workspace:/workspace
       - codex_config:/root/.config
 
+    environment:
+      - HOME=/home/dev
+
+    tmpfs:
+      - /tmp
+
+    cap_drop:
+      - ALL
+
+    security_opt:
+      - no-new-privileges:true
+
+    network_mode: bridge
+
     command: sleep infinity
 
 volumes: