From cf78e147096e6cad509d9f3dd9555f6caea77053 Mon Sep 17 00:00:00 2001
From: admin <peancharoen.pslcp3@gmail.com>
Date: Tue, 21 Apr 2026 16:11:22 +0700
Subject: [PATCH] 690421:1611 Update ClamAV# #02

---
 .../QNAP/app/docker-compose-app.yml           | 50 +++++++++----------
 1 file changed, 25 insertions(+), 25 deletions(-)

diff --git a/specs/04-Infrastructure-OPS/04-00-docker-compose/QNAP/app/docker-compose-app.yml b/specs/04-Infrastructure-OPS/04-00-docker-compose/QNAP/app/docker-compose-app.yml
index 4597619..ac56ca8 100644
--- a/specs/04-Infrastructure-OPS/04-00-docker-compose/QNAP/app/docker-compose-app.yml
+++ b/specs/04-Infrastructure-OPS/04-00-docker-compose/QNAP/app/docker-compose-app.yml
@@ -43,19 +43,19 @@ services:
     image: lcbp3-backend:${BACKEND_IMAGE_TAG:-latest}
     container_name: backend
     # M4: container hardening
-    user: 'node'
+    # user: 'node'
     # L1: stdin_open/tty removed — production services ไม่ต้องใช้ interactive TTY
-    read_only: true
-    tmpfs:
-      - /tmp:rw,noexec,nosuid,size=256m
-    security_opt:
-      - no-new-privileges:true
-    cap_drop:
-      - ALL
-    cap_add:
-      - CHOWN
-      - SETUID
-      - SETGID
+    # read_only: true
+    # tmpfs:
+    #   - /tmp:rw,noexec,nosuid,size=256m
+    # security_opt:
+    #  - no-new-privileges:true
+    # cap_drop:
+    #   - ALL
+    # cap_add:
+    #   - CHOWN
+    #   - SETUID
+    #  - SETGID
     deploy:
       resources:
         limits:
@@ -127,19 +127,19 @@ services:
     image: lcbp3-frontend:${FRONTEND_IMAGE_TAG:-latest}
     container_name: frontend
     # M4: container hardening (Next.js standalone runs as 'nextjs' user by default)
-    user: 'nextjs'
-    read_only: true
-    tmpfs:
-      - /tmp:rw,noexec,nosuid,size=128m
-      - /app/.next/cache:rw,size=256m
-    security_opt:
-      - no-new-privileges:true
-    cap_drop:
-      - ALL
-    cap_add:
-      - CHOWN
-      - SETUID
-      - SETGID
+    # user: 'nextjs'
+    # read_only: true
+    # tmpfs:
+    #   - /tmp:rw,noexec,nosuid,size=128m
+    #   - /app/.next/cache:rw,size=256m
+    # security_opt:
+    #   - no-new-privileges:true
+    # cap_drop:
+    #   - ALL
+    # cap_add:
+    #  - CHOWN
+    #   - SETUID
+    #   - SETGID
     # L1: stdin_open/tty removed
     deploy:
       resources: