diff --git a/docker-compose.yml b/docker-compose.yml
index 709b628..d10116c 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,6 +2,10 @@ services:
   db:
     image: postgres:16-alpine
     restart: unless-stopped
+    # Disable sysctl tuning — required for unprivileged LXC environments
+    command: postgres -c ipc_lock=off
+    sysctls:
+      net.ipv4.ip_unprivileged_port_start: 0
     volumes:
       - postgres_data:/var/lib/postgresql/data
     environment: