From 6cd76ad481dbd30fba096ffa6dfe611ca15b36ae Mon Sep 17 00:00:00 2001
From: nathan <nathan@castaldifamily.com>
Date: Wed, 22 Apr 2026 23:31:45 -0400
Subject: [PATCH] chore: add privileged and security options for komodo-db
 service in compose.yaml

---
 nodes/heimdall/core/compose.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nodes/heimdall/core/compose.yaml b/nodes/heimdall/core/compose.yaml
index 82a3612..f7a75f6 100644
--- a/nodes/heimdall/core/compose.yaml
+++ b/nodes/heimdall/core/compose.yaml
@@ -135,6 +135,10 @@ services:
   komodo-db:
     image: mongo:7.0
     container_name: komodo-db
+    privileged: true  # Grant the permission to manage its own "spill" files
+    security_opt:
+      - seccomp:unconfined
+      - apparmor:unconfined
     labels:
       komodo.skip: # Prevent Komodo from stopping with StopAllContainers
     command: --quiet --wiredTigerCacheSizeGB 0.25