Refine V2.1 source and Docker release

compose.yaml

@@ -1,13 +1,21 @@
 services:
   aimilivpn:
     image: ghcr.io/baoweise-bot/aimili-vpngate:2.1
+    build:
+      context: .
+      args:
+        BUILD_VERSION: local
     container_name: aimilivpn
     network_mode: host
+    cap_drop:
+      - ALL
     cap_add:
       - NET_ADMIN
+      - NET_RAW
     devices:
       - /dev/net/tun:/dev/net/tun
     environment:
+      DEPLOYMENT_MODE: docker
       VPNGATE_DATA_DIR: /data
       UI_HOST: "0.0.0.0"
       UI_PORT: "8787"
@@ -16,6 +24,8 @@ services:
     volumes:
       - aimilivpn-data:/data
     init: true
+    security_opt:
+      - no-new-privileges:true
     restart: unless-stopped
 
 volumes: