style: reorder service keys per dclint

backrest/compose.yaml

@@ -20,18 +20,16 @@ services:
     networks:
       - proxy
     restart: unless-stopped
-    security_opt:
-      - no-new-privileges:true
-    # Root keeps only the capabilities restic needs to read and restore
-    # files owned by other users.
-    cap_drop:
-      - ALL
     cap_add:
       - CHOWN
       - DAC_OVERRIDE
       - DAC_READ_SEARCH
       - FOWNER
       - FSETID
+    # Root keeps only the capabilities restic needs to read and restore
+    # files owned by other users.
+    cap_drop:
+      - ALL
     deploy:
       resources:
         limits:
@@ -40,6 +38,8 @@ services:
         reservations:
           cpus: "1.0"
           memory: 512M
+    security_opt:
+      - no-new-privileges:true
 networks:
   proxy:
     external: true