|
@@ -0,0 +1,29 @@
|
|
|
|
+runAsContext:
|
|
|
|
+ - userName: root
|
|
|
|
+ groupName: root
|
|
|
|
+ gid: 0
|
|
|
|
+ uid: 0
|
|
|
|
+ description: Vikunja API runs as root user.
|
|
|
|
+ - userName: nginx
|
|
|
|
+ groupName: nginx
|
|
|
|
+ gid: 101
|
|
|
|
+ uid: 101
|
|
|
|
+ description: Vikunja Frontend runs as a non-root user.
|
|
|
|
+ - userName: nginx
|
|
|
|
+ groupName: nginx
|
|
|
|
+ gid: 101
|
|
|
|
+ uid: 101
|
|
|
|
+ description: Vikunja Proxy runs as a non-root user.
|
|
|
|
+ - userName: postgres
|
|
|
|
+ groupName: postgres
|
|
|
|
+ gid: 999
|
|
|
|
+ uid: 999
|
|
|
|
+ description: Postgres runs as a non-root user.
|
|
|
|
+capabilities:
|
|
|
|
+ - name: CHOWN
|
|
|
|
+ description: Vikunka API is able to chown files.
|
|
|
|
+ - name: SETGID
|
|
|
|
+ description: Vikunka API is able to set group ID for it's sub-processes.
|
|
|
|
+ - name: SETUID
|
|
|
|
+ description: Vikunka API is able to set user ID for it's sub-processes.
|
|
|
|
+hostMounts: []
|