From deebc86b2f071f456022e5209f52056cf24a1188 Mon Sep 17 00:00:00 2001
From: wander <wander@unfilteredrealm.com>
Date: Sat, 7 Feb 2026 00:11:18 -0500
Subject: [PATCH] Fix SELinux label from :Z (private) to :z (shared)

---
 docker-compose.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index c2c6dc0..9a7a4e0 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -13,7 +13,7 @@ services:
       - "9051:9051"
       - "9050:9050"
     volumes:
-      - tor-data-new:/var/lib/tor/:Z
+      - tor-data-new:/var/lib/tor/:z
     depends_on:
       - web
 
@@ -28,13 +28,14 @@ services:
     build: .
     image: docker-tor-hidden-service:latest
     container_name: vanguards-sidecar
+    user: "0:0"
     restart: unless-stopped
     # The 'vanguards' first word triggers the logic in your entrypoint.sh
     command: vanguards --control_ip tor-service --control_port 9051 --control_pass secure_password
     depends_on:
       - tor
     volumes:
-      - tor-data-new:/var/lib/tor/:Z
+      - tor-data-new:/var/lib/tor/:z
 
 volumes:
   tor-data-new: