add extra cap to syncthing and set by default the ignore perms (#1384)

library/ix-dev/enterprise/syncthing/Chart.yaml

@@ -3,7 +3,7 @@ description: Syncthing is a continuous file synchronization program.
 annotations:
   title: Syncthing
 type: application
-version: 1.0.9
+version: 1.0.10
 apiVersion: v2
 appVersion: '1.23.3'
 kubeVersion: '>=1.16.0-0'

library/ix-dev/enterprise/syncthing/templates/_configure.tpl

@@ -49,6 +49,7 @@ configmap:
         setConfig defaults folder sync-ownership set -- 1
         setConfig defaults folder send-xattrs set -- 1
         setConfig defaults folder sync-xattrs set -- 1
+        setConfig defaults folder ignore-perms set -- 1
   syncthing-truenas-logo:
     enabled: true
     data:

library/ix-dev/enterprise/syncthing/templates/_syncthing.tpl

@@ -30,8 +30,9 @@ workload:
                 - SETGID
                 - SETFCAP
                 - SETPCAP
+                - SYS_ADMIN
           env:
-            PCAP: cap_chown,cap_dac_override,cap_fowner+ep
+            PCAP: cap_sys_admin,cap_chown,cap_dac_override,cap_fowner+ep
             STGUIADDRESS: "0.0.0.0:{{ .Values.syncthingNetwork.webPort }}"
             # Set a custom override for the GUI assets
             STGUIASSETS: /var/truenas/assets/gui