rm: unwanted headers, rm: volume bind option

admin-dashboard/rootfs/defaults/dashboard.conf

@@ -9,11 +9,6 @@ charset utf8;
 
 client_max_body_size 0;
 
-# Security headers
-add_header X-Content-Type-Options nosniff;
-add_header X-XSS-Protection "1; mode=block";
-add_header X-Frame-Options DENY;
-
 location ~ ^/(.well-known)/(.*)$ {
     alias /usr/src/dashboard/$1/$2;
 }
@@ -42,10 +37,5 @@ limit_req zone=api burst={{ $RATE_LIMIT_BURST }} nodelay;
 {{ end }}
 
 location / {
-    proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-
     proxy_pass http://dashboard:{{ $DASHBOARD_PORT }};
 }

docker-compose.yaml

@@ -4,9 +4,9 @@ services:
     restart: ${RESTART_POLICY:-unless-stopped}
     volumes:
       - ${CONFIG}/relayer/data:/data:Z
-      - ${CONFIG}/relayer/home:/home/${RELAYER_USER:-relayer}:Z
-      - ${CONFIG_PATH:-./config.yaml}:/home/${RELAYER_USER:-relayer}/config.yaml:Z
-      - relay-socket:${SOCKET_DIR:-/var/run/relayer}:Z
+      - ${CONFIG}/relayer/home:/home/${RELAYER_USER:-relayer}
+      - ${CONFIG_PATH:-./config.yaml}:/home/${RELAYER_USER:-relayer}/config.yaml
+      - relay-socket:${SOCKET_DIR:-/var/run/relayer}
     labels:
       service: "centralized-relay"
     healthcheck:
@@ -29,11 +29,11 @@ services:
       - "${HTTPS_PORT:-443}:443"
       - "${DASHBOARD_PORT:-3000}"
     volumes:
-      - ${CONFIG}/web:/config:Z
-      - ${CONFIG}/web/crontabs:/var/spool/cron/crontabs:Z
-      - ${CONFIG}/dashboard/cache:/usr/share/dashboard/.next/cache:Z
-      - ${CONFIG}/dashboard/data:/data:Z
-      - relay-socket:${SOCKET_DIR:-/var/run/relayer}:Z
+      - ${CONFIG}/web:/config
+      - ${CONFIG}/web/crontabs:/var/spool/cron/crontabs
+      - ${CONFIG}/dashboard/cache:/usr/share/dashboard/.next/cache
+      - ${CONFIG}/dashboard/data:/data
+      - relay-socket:${SOCKET_DIR:-/var/run/relayer}
       - /proc:/host/proc:ro
       - /sys:/host/sys:ro
     healthcheck: