Update concourse docker file

Author: testinfected

concourse.yml

@@ -16,16 +16,20 @@ services:
     depends_on: [concourse-db]
     ports: ["8080:8080"]
     environment:
-      CONCOURSE_POSTGRES_HOST: concourse-db
-      CONCOURSE_POSTGRES_USER: concourse_user
-      CONCOURSE_POSTGRES_PASSWORD: concourse_pass
-      CONCOURSE_POSTGRES_DATABASE: concourse
-      CONCOURSE_EXTERNAL_URL: http://localhost:8080
-      CONCOURSE_ADD_LOCAL_USER: test:test
-      CONCOURSE_MAIN_TEAM_LOCAL_USER: test
-      CONCOURSE_WORKER_BAGGAGECLAIM_DRIVER: overlay
-      CONCOURSE_CLIENT_SECRET: Y29uY291cnNlLXdlYgo=
-      CONCOURSE_GARDEN_DNS_SERVER: 8.8.8.8
-    dns:
-        - 8.8.8.8
-        - 8.8.4.4
+        CONCOURSE_POSTGRES_HOST: concourse-db
+        CONCOURSE_POSTGRES_USER: concourse_user
+        CONCOURSE_POSTGRES_PASSWORD: concourse_pass
+        CONCOURSE_POSTGRES_DATABASE: concourse
+        CONCOURSE_EXTERNAL_URL: http://localhost:8080
+        CONCOURSE_ADD_LOCAL_USER: test:test
+        CONCOURSE_MAIN_TEAM_LOCAL_USER: test
+        # instead of relying on the default "detect"
+        CONCOURSE_WORKER_BAGGAGECLAIM_DRIVER: overlay
+        CONCOURSE_CLIENT_SECRET: Y29uY291cnNlLXdlYgo=
+        CONCOURSE_TSA_CLIENT_SECRET: Y29uY291cnNlLXdvcmtlcgo=
+        CONCOURSE_X_FRAME_OPTIONS: allow
+        CONCOURSE_CONTENT_SECURITY_POLICY: "*"
+        CONCOURSE_CLUSTER_NAME: tutorial
+        CONCOURSE_WORKER_CONTAINERD_DNS_SERVER: "8.8.8.8"
+        CONCOURSE_WORKER_RUNTIME: "containerd"
+