fix miniflux

1 files changed, 8 insertions, 4 deletions

diff --git a/f3s/freshrss/helm-chart/templates/deployment.yaml b/f3s/freshrss/helm-chart/templates/deployment.yaml
index 1277c62..99f114c 100644
--- a/f3s/freshrss/helm-chart/templates/deployment.yaml
+++ b/f3s/freshrss/helm-chart/templates/deployment.yaml
@@ -13,14 +13,19 @@ spec:
       labels:
         app: freshrss
     spec:
+      securityContext:
+        runAsUser: 65534        # nobody
+        runAsGroup: 65534       # nobody / nogroup
+        fsGroup: 65534          # ensure mounted volumes are group-writable
+        runAsNonRoot: true
       containers:
       - name: freshrss
         image: freshrss/freshrss:latest
         ports:
-        - containerPort: 80
+          - containerPort: 80
         volumeMounts:
-        - name: freshrss-data
-          mountPath: /var/www/FreshRSS/data
+          - name: freshrss-data
+            mountPath: /var/www/FreshRSS/data
       volumes:
       - name: freshrss-data
         persistentVolumeClaim:
@@ -41,4 +46,3 @@ spec:
       targetPort: 80
   selector:
     app: freshrss
-