From 0dcfff15b309d22c8bb587def11b6fc5b1da9df8 Mon Sep 17 00:00:00 2001
From: phact <estevezsebastian@gmail.com>
Date: Wed, 8 Oct 2025 13:25:55 -0400
Subject: [PATCH] podman: flow directory security

---
 docker-compose-cpu.yml | 4 ++--
 docker-compose.yml     | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/docker-compose-cpu.yml b/docker-compose-cpu.yml
index 40507c94..c0af8a01 100644
--- a/docker-compose-cpu.yml
+++ b/docker-compose-cpu.yml
@@ -74,7 +74,7 @@ services:
     volumes:
       - ./documents:/app/documents:Z
       - ./keys:/app/keys:Z
-      - ./flows:/app/flows:Z
+      - ./flows:/app/flows:U,z
 
   openrag-frontend:
     image: phact/openrag-frontend:${OPENRAG_VERSION:-latest}
@@ -91,7 +91,7 @@ services:
 
   langflow:
     volumes:
-      - ./flows:/app/flows:Z
+      - ./flows:/app/flows:U,z
     image: phact/openrag-langflow:${LANGFLOW_VERSION:-latest}
     # build:
     #   context: .
diff --git a/docker-compose.yml b/docker-compose.yml
index 4a68d210..df8a3228 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -73,7 +73,7 @@ services:
     volumes:
       - ./documents:/app/documents:Z
       - ./keys:/app/keys:Z
-      - ./flows:/app/flows:z
+      - ./flows:/app/flows:U,z
     gpus: all
 
   openrag-frontend:
@@ -91,7 +91,7 @@ services:
 
   langflow:
     volumes:
-      - ./flows:/app/flows:z
+      - ./flows:/app/flows:U,z
     image: phact/openrag-langflow:${LANGFLOW_VERSION:-latest}
     # build:
     #   context: .