diff --git a/library/ix-dev/charts/nextcloud/README.md b/library/ix-dev/charts/nextcloud/README.md index e69de29bb2..09c7fcc1d8 100644 --- a/library/ix-dev/charts/nextcloud/README.md +++ b/library/ix-dev/charts/nextcloud/README.md @@ -0,0 +1,3 @@ +# Nextcloud + +[Nextcloud](https://nextcloud.com/) is a file sharing server that puts the control and security of your own data back into your hands. diff --git a/library/ix-dev/charts/nextcloud/app-readme.md b/library/ix-dev/charts/nextcloud/app-readme.md index f2e78c31f9..09c7fcc1d8 100644 --- a/library/ix-dev/charts/nextcloud/app-readme.md +++ b/library/ix-dev/charts/nextcloud/app-readme.md @@ -1,3 +1,3 @@ -# nextcloud +# Nextcloud -[nextcloud](https://nextcloud.com/) is a file sharing server that puts the control and security of your own data back into your hands. +[Nextcloud](https://nextcloud.com/) is a file sharing server that puts the control and security of your own data back into your hands. diff --git a/library/ix-dev/charts/nextcloud/metadata.yaml b/library/ix-dev/charts/nextcloud/metadata.yaml index a0c2282029..19ef667362 100644 --- a/library/ix-dev/charts/nextcloud/metadata.yaml +++ b/library/ix-dev/charts/nextcloud/metadata.yaml @@ -6,8 +6,8 @@ runAsContext: description: Nextcloud runs as root user. - userName: root groupName: root - gid: 0 - uid: 0 + gid: 999 + uid: 999 description: Postgres runs as root user. - userName: root groupName: root @@ -19,28 +19,14 @@ capabilities: description: Nextcloud, Nginx and Postgres are able to chown files. - name: FOWNER description: Nextcloud, Nginx and Postgres are able to bypass permission checks for it's sub-processes. - - name: SYS_CHROOT - description: Nextcloud, Nginx and Postgres are able to use chroot. - - name: MKNOD - description: Nextcloud, Nginx and Postgres are able to create device nodes. - name: DAC_OVERRIDE description: Nextcloud, Nginx and Postgres are able to bypass permission checks. - - name: FSETID - description: Nextcloud, Nginx and Postgres are able to set file capabilities. - - name: KILL - description: Nextcloud, Nginx and Postgres are able to kill processes. - name: SETGID description: Nextcloud, Nginx and Postgres are able to set group ID for it's sub-processes. - name: SETUID description: Nextcloud, Nginx and Postgres are able to set user ID for it's sub-processes. - - name: SETPCAP - description: Nextcloud, Nginx and Postgres are able to set process capabilities. - name: NET_BIND_SERVICE description: Nextcloud, Nginx and Postgres are able to bind to privileged ports. - - name: SETFCAP - description: Nextcloud, Nginx and Postgres are able to set file capabilities. - name: NET_RAW description: Nextcloud, Nginx and Postgres are able to use raw sockets. - - name: AUDIT_WRITE - description: Nextcloud, Nginx and Postgres are able to write to audit log. hostMounts: []