diff --git a/charts/stable/audiobookshelf/Chart.yaml b/charts/stable/audiobookshelf/Chart.yaml index 2d1ca1a6361..8349ba02d8f 100644 --- a/charts/stable/audiobookshelf/Chart.yaml +++ b/charts/stable/audiobookshelf/Chart.yaml @@ -18,7 +18,7 @@ name: audiobookshelf sources: - https://hub.docker.com/r/advplyr/audiobookshelf - https://github.com/advplyr/audiobookshelf -version: 2.0.8 +version: 2.0.9 annotations: truecharts.org/catagories: | - media diff --git a/charts/stable/audiobookshelf/questions.yaml b/charts/stable/audiobookshelf/questions.yaml index 3c2d64a8999..22258a887e5 100644 --- a/charts/stable/audiobookshelf/questions.yaml +++ b/charts/stable/audiobookshelf/questions.yaml @@ -245,7 +245,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: @@ -255,7 +255,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: true + default: false # Include{securityContextAdvanced} - variable: podSecurityContext @@ -270,13 +270,13 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 568 + default: 0 - variable: runAsGroup label: "runAsGroup" description: "The groupID this App of the user running the application" schema: type: int - default: 568 + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." diff --git a/charts/stable/audiobookshelf/values.yaml b/charts/stable/audiobookshelf/values.yaml index 73f2767bd46..4bf9615ae7e 100644 --- a/charts/stable/audiobookshelf/values.yaml +++ b/charts/stable/audiobookshelf/values.yaml @@ -12,12 +12,28 @@ env: name: audiobookshelf-secrets key: TOKEN_SECRET +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + service: main: ports: main: port: 10223 +probes: + liveness: + path: "/ping" + readiness: + path: "/ping" + startup: + path: "/ping" + persistence: config: enabled: true