Audit backup recovery coverage and preserve separator container isolation

deploy/docker_backup.py

@@ -142,7 +142,8 @@ def restore(manager,c):
  if base.is_symlink():raise ValueError('Unsicheres Dienstverzeichnis.')
  base.mkdir(parents=True,exist_ok=True,mode=0o700)
  args=['create','--name',name,'--network',c['network'],'--restart',c['restart'],'--cap-drop','ALL','--security-opt','no-new-privileges:true','--pids-limit','256']
- if c['name']=='athena-ladypoly':args+=['--read-only','--tmpfs','/tmp:rw,noexec,nosuid,size=128m,uid=65534,gid=65534']
+ if c['name'] in ('athena-ladypoly','athena-separator-web'):
+  args+=['--read-only','--tmpfs','/tmp:rw,noexec,nosuid,size='+('1g' if c['name']=='athena-separator-web' else '128m')+',uid=65534,gid=65534']
  if c['memory']:args+=['--memory',str(c['memory'])]
  if c['nanocpus']:args+=['--cpus',str(c['nanocpus']/1e9)]
  for k,v in c['labels'].items():