From 3bd09c48af29ff7e526de265bd1fcfd5c4caba42 Mon Sep 17 00:00:00 2001 From: continuist Date: Sat, 20 Sep 2025 23:25:07 -0400 Subject: [PATCH] change nginx settings --- deploy/prod-pod.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/deploy/prod-pod.yml b/deploy/prod-pod.yml index fb93937..bc22cd0 100644 --- a/deploy/prod-pod.yml +++ b/deploy/prod-pod.yml @@ -150,6 +150,8 @@ spec: allowPrivilegeEscalation: false capabilities: drop: ["ALL"] + runAsUser: 0 # Run as root + runAsGroup: 0 # Run as root group ports: - containerPort: 8080 # inside pod hostIP: 127.0.0.1 # only loopback on host