From a2cde231a624704295524eb1372f51eef8ce955f Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Fri, 9 Jan 2026 11:36:11 +0200
Subject: Add SETGID and SETUID capabilities to cgit container

Nginx workers need these capabilities to drop privileges.
Add SETGID and SETUID to allow nginx workers to start properly.
---
 f3s/git-server/helm-chart/templates/deployment.yaml | 1 +
 1 file changed, 1 insertion(+)

(limited to 'f3s/git-server')

diff --git a/f3s/git-server/helm-chart/templates/deployment.yaml b/f3s/git-server/helm-chart/templates/deployment.yaml
index 7381178..b876e0f 100644
--- a/f3s/git-server/helm-chart/templates/deployment.yaml
+++ b/f3s/git-server/helm-chart/templates/deployment.yaml
@@ -95,6 +95,7 @@ spec:
           allowPrivilegeEscalation: false
           capabilities:
             drop: ["ALL"]
+            add: ["SETGID", "SETUID"]
         resources:
           requests:
             cpu: 50m
-- 
cgit v1.2.3