{
  "name": "docker-exec",
  "mode": "restricted",
  "capabilities": [
    "restart_container",
    "stop_container"
  ],
  "rules": [
    "demander confirmation explicite",
    "interdire nextcloud",
    "interdire authentik",
    "interdire traefik"
  ]
}