style: lint code

apps/opensandbox/config.toml

@@ -22,15 +22,15 @@ network_mode = "bridge"
 # Security hardening options
 # Drop dangerous capabilities
 drop_capabilities = [
-    "AUDIT_WRITE",
-    "MKNOD",
-    "NET_ADMIN",
-    "NET_RAW",
-    "SYS_ADMIN",
-    "SYS_MODULE",
-    "SYS_PTRACE",
-    "SYS_TIME",
-    "SYS_TTY_CONFIG"
+  "AUDIT_WRITE",
+  "MKNOD",
+  "NET_ADMIN",
+  "NET_RAW",
+  "SYS_ADMIN",
+  "SYS_MODULE",
+  "SYS_PTRACE",
+  "SYS_TIME",
+  "SYS_TTY_CONFIG"
 ]
 
 # Prevent privilege escalation inside containers

apps/opensandbox/docker-compose.yaml

@@ -8,14 +8,14 @@ x-defaults: &defaults
     driver: json-file
     options:
       max-size: 100m
-      max-file: "3"
+      max-file: '3'
 
 services:
   opensandbox-server:
     <<: *defaults
     image: ${GLOBAL_REGISTRY:-}opensandbox/server:${OPENSANDBOX_SERVER_VERSION:-v1.0.5}
     ports:
-      - "${OPENSANDBOX_SERVER_PORT_OVERRIDE:-8080}:8080"
+      - '${OPENSANDBOX_SERVER_PORT_OVERRIDE:-8080}:8080'
     volumes:
       # Mount Docker socket to enable sandbox creation
       - /var/run/docker.sock:/var/run/docker.sock
@@ -30,7 +30,7 @@ services:
       # Docker runtime settings (override config.toml via env vars if needed)
       - DOCKER_HOST=${DOCKER_HOST:-unix:///var/run/docker.sock}
     healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
+      test: [CMD, curl, -f, 'http://localhost:8080/health']
       interval: 30s
       timeout: 10s
       retries: 3