mirror of
https://github.com/truenas/charts.git
synced 2026-04-13 17:52:13 +08:00
fbc87af8dd
* init commit * add deployments * more config * syntax err * syntax err * add missing func * naming * lint * fix yaml * yaml * ci vals * ci port * perms * wrong pod * hmm * meh * no nginx without cert * db stuf * simplify * add nots * fixes * add todo * storage * test https * perms * actually mount the config * add some configs * update values * fsgroup * cmaps * update config * init quests * more test vals * more questions * nginx conf * cron * fix cron * meta * typo * additional storage goes to cron too * data and html * config * ui * values * fix * add backwards compat * make templ * use var * init migration * make exec * add todo * handle hostpaths too * update storage for backwards * typo * add redis * cleaner storage solution * br * rm * some cleanup * backup * whops * fsgroup * fix db script * bump image * remove test * test * todo * try this * lets try a hack * hmm * nope * eof * ofc * hmm * fix * explain the hack * update vers * remove todo * fix html storage * backwards compat
33 lines
1.1 KiB
YAML
33 lines
1.1 KiB
YAML
runAsContext:
|
|
- userName: root
|
|
groupName: root
|
|
gid: 0
|
|
uid: 0
|
|
description: Nextcloud runs as root user.
|
|
- userName: root
|
|
groupName: root
|
|
gid: 999
|
|
uid: 999
|
|
description: Postgres runs as root user.
|
|
- userName: root
|
|
groupName: root
|
|
gid: 0
|
|
uid: 0
|
|
description: Nginx runs as root user. (Nginx only runs when certificate is provided)
|
|
capabilities:
|
|
- name: CHOWN
|
|
description: Nextcloud, Nginx and Postgres are able to chown files.
|
|
- name: FOWNER
|
|
description: Nextcloud, Nginx and Postgres are able to bypass permission checks for it's sub-processes.
|
|
- name: DAC_OVERRIDE
|
|
description: Nextcloud, Nginx and Postgres are able to bypass permission checks.
|
|
- name: SETGID
|
|
description: Nextcloud, Nginx and Postgres are able to set group ID for it's sub-processes.
|
|
- name: SETUID
|
|
description: Nextcloud, Nginx and Postgres are able to set user ID for it's sub-processes.
|
|
- name: NET_BIND_SERVICE
|
|
description: Nextcloud, Nginx and Postgres are able to bind to privileged ports.
|
|
- name: NET_RAW
|
|
description: Nextcloud, Nginx and Postgres are able to use raw sockets.
|
|
hostMounts: []
|