cluster

commit 76059a9145e7f42cf561c9f618c34bc1d78baecc
parent 8be9c8397daee5da3f138e36e133c41cf6c14896
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Thu, 10 Jul 2025 17:25:37 +0200

Meow

Diffstat:
M
apps/base/ntfy/release.yaml
 | 
29
+++++++++++++++++++++++++++++

1 file changed, 29 insertions(+), 0 deletions(-)
diff --git a/apps/base/ntfy/release.yaml b/apps/base/ntfy/release.yaml
@@ -26,8 +26,37 @@ spec:
             labels:
                 app: ntfy
         spec:
+            securityContext:
+                runAsUser: 1000
+                runAsGroup: 1000
+                fsGroup: 1000
+            initContainers:
+                - name: fix-permissions
+                  image: busybox
+                  securityContext:
+                      runAsUser: 0
+                      runAsGroup: 0
+                      allowPrivilegeEscalation: true
+                  command:
+                      [
+                          "sh",
+                          "-c",
+                          "chown -R 1000:1000 /opt/docker/ntfy/config /opt/docker/ntfy/cache /etc/ntfy",
+                      ]
+                  volumeMounts:
+                      - name: ntfy-config
+                        mountPath: /opt/docker/ntfy/config
+                      - name: ntfy-cache
+                        mountPath: /opt/docker/ntfy/cache
+                      - name: ntfy-data
+                        mountPath: /etc/ntfy
             containers:
                 - name: ntfy
+                  securityContext:
+                      allowPrivilegeEscalation: false
+                      runAsUser: 1000
+                      runAsGroup: 1000
+                      readOnlyRootFilesystem: true
                   image: binwiederhier/ntfy
                   args:
                       ["serve", "--config", "/opt/docker/ntfy/config/ntfy.yml"]