image: repository: tccr.io/truecharts/zerotier pullPolicy: IfNotPresent tag: 1.10.1@sha256:d42c000a0482bba4f96bc4aaabb37fb9a1189e8fcd5f0cdaf2f73e4c8ccec62c securityContext: readOnlyRootFilesystem: false runAsNonRoot: false capabilities: add: - NET_ADMIN podSecurityContext: runAsUser: 0 runAsGroup: 0 secretEnv: ZEROTIER_API_SECRET: "" ZEROTIER_IDENTITY_PUBLIC: "" ZEROTIER_IDENTITY_SECRET: "" service: main: ports: main: protocol: UDP targetPort: 9993 port: 10190 persistence: config: enabled: true mountPath: "/var/lib/zerotier-one" tun: enabled: true type: hostPath hostPath: /dev/net/tun mountPath: /dev/net/tun hostPathType: "" readOnly: false portal: enabled: false