alert - may be hacked

docker-compose.yml

@@ -28,6 +28,8 @@ services:
     expose:
       - "9000"
       - "8000"
+    environment:
+      - DOCKER_BUILDKIT=0
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - portainer_data:/data

users.json

@@ -19,8 +19,8 @@
       "allow_uppercase": false
     }
   },
-  "revision": 7,
-  "last_modified": "2025-08-28T19:12:55.534658844Z",
+  "revision": 8,
+  "last_modified": "2025-09-06T00:40:31.485239329Z",
   "users": [
     {
       "id": "39555452-454e-4c85-829b-8195a8dd8c81",
@@ -56,11 +56,21 @@
           "expired_at": "0001-01-01T00:00:00Z",
           "created_at": "2025-08-28T19:12:55.534650459Z",
           "disabled_at": "0001-01-01T00:00:00Z"
+        },
+        {
+          "id": "5QQfg37cZ8BhVcRXcqZshoDKLH9kJR92ArKtXZLH",
+          "prefix": "3hUFsBJzCjgADedceTqcZY6V",
+          "usage": "api",
+          "comment": "APIYGTB1BM7",
+          "payload": "$2a$10$nYV0Di9fXHmrire9tdjNeOhBrElyytCMScZVuNxuJZ2hm7aNtvtQ.",
+          "expired_at": "0001-01-01T00:00:00Z",
+          "created_at": "2025-09-06T00:40:31.485234901Z",
+          "disabled_at": "0001-01-01T00:00:00Z"
         }
       ],
       "created": "2021-10-25T17:04:58.42512588Z",
-      "last_modified": "2025-08-28T19:12:55.534654817Z",
-      "revision": 5,
+      "last_modified": "2025-09-06T00:40:31.485238347Z",
+      "revision": 6,
       "roles": [
         {
           "name": "admin",