cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README
commit d3025e2c67d2afb15a100306ee58cf690cd27cc3
parent 7fa7230cf86a52e727ff630074045c3e0ef6c8f1
Author: MTRNord <mtrnord1@gmail.com>
Date:   Thu, 16 May 2024 23:33:27 +0200

Fix perms

Diffstat:

Mapps/base/ejabberd/release.yaml | 11+++++++++++


1 file changed, 11 insertions(+), 0 deletions(-)

diff --git a/apps/base/ejabberd/release.yaml b/apps/base/ejabberd/release.yaml
@@ -13,6 +13,17 @@ spec:
         kind: HelmRepository
         name: ejabberd
   values:
+  securityContext:
+    capabilities:
+      drop:
+        - ALL
+      add:
+        - NET_BIND_SERVICE
+    readOnlyRootFilesystem: true
+    runAsNonRoot: true
+    runAsUser: 9000
+    seccompProfile:
+      type: RuntimeDefault
     listenGlobal:
       s2s_use_starttls: optional
     modules: