diff --git a/compose.yaml b/compose.yaml
index 933bacd..7b9858a 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -5,5 +5,11 @@ services:
       - "8000:8000"
     environment:
       MONITOR_LOG_LEVEL: INFO
-      MONITOR_CHECK_TIMEOUT_SECONDS: 5
-    restart: unless-stopped
+      MONITOR_REQUEST_TIMEOUT_SECONDS: 5
+    read_only: true
+    tmpfs:
+      - /tmp
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL