From c74ded115cce447f3b2546d3fab5ff45b19f5681 Mon Sep 17 00:00:00 2001
From: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Date: Thu, 20 Jul 2023 14:37:57 +0300
Subject: [PATCH] add extra cap to syncthing and set by default the ignore
 perms (#1384)

---
 library/ix-dev/enterprise/syncthing/Chart.yaml               | 2 +-
 library/ix-dev/enterprise/syncthing/templates/_configure.tpl | 1 +
 library/ix-dev/enterprise/syncthing/templates/_syncthing.tpl | 3 ++-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/library/ix-dev/enterprise/syncthing/Chart.yaml b/library/ix-dev/enterprise/syncthing/Chart.yaml
index f56b754d67..4a1084a444 100644
--- a/library/ix-dev/enterprise/syncthing/Chart.yaml
+++ b/library/ix-dev/enterprise/syncthing/Chart.yaml
@@ -3,7 +3,7 @@ description: Syncthing is a continuous file synchronization program.
 annotations:
   title: Syncthing
 type: application
-version: 1.0.9
+version: 1.0.10
 apiVersion: v2
 appVersion: '1.23.3'
 kubeVersion: '>=1.16.0-0'
diff --git a/library/ix-dev/enterprise/syncthing/templates/_configure.tpl b/library/ix-dev/enterprise/syncthing/templates/_configure.tpl
index 989e3710c3..390f118314 100644
--- a/library/ix-dev/enterprise/syncthing/templates/_configure.tpl
+++ b/library/ix-dev/enterprise/syncthing/templates/_configure.tpl
@@ -49,6 +49,7 @@ configmap:
         setConfig defaults folder sync-ownership set -- 1
         setConfig defaults folder send-xattrs set -- 1
         setConfig defaults folder sync-xattrs set -- 1
+        setConfig defaults folder ignore-perms set -- 1
   syncthing-truenas-logo:
     enabled: true
     data:
diff --git a/library/ix-dev/enterprise/syncthing/templates/_syncthing.tpl b/library/ix-dev/enterprise/syncthing/templates/_syncthing.tpl
index a15113cd20..be392f87be 100644
--- a/library/ix-dev/enterprise/syncthing/templates/_syncthing.tpl
+++ b/library/ix-dev/enterprise/syncthing/templates/_syncthing.tpl
@@ -30,8 +30,9 @@ workload:
                 - SETGID
                 - SETFCAP
                 - SETPCAP
+                - SYS_ADMIN
           env:
-            PCAP: cap_chown,cap_dac_override,cap_fowner+ep
+            PCAP: cap_sys_admin,cap_chown,cap_dac_override,cap_fowner+ep
             STGUIADDRESS: "0.0.0.0:{{ .Values.syncthingNetwork.webPort }}"
             # Set a custom override for the GUI assets
             STGUIASSETS: /var/truenas/assets/gui