fix: add sysctls to db service to resolve unprivileged LXC sysctl permission error

docker-compose.yml

@@ -2,6 +2,10 @@ services:
   db:
     image: postgres:16-alpine
     restart: unless-stopped
+    # Disable sysctl tuning — required for unprivileged LXC environments
+    command: postgres -c ipc_lock=off
+    sysctls:
+      net.ipv4.ip_unprivileged_port_start: 0
     volumes:
       - postgres_data:/var/lib/postgresql/data
     environment: