From 7197ab2ae9a1d374f1783176a49b223deb58bc4a Mon Sep 17 00:00:00 2001
From: Martyn Ranyard <m@rtyn.berlin>
Date: Tue, 11 Mar 2025 16:37:40 +0000
Subject: [PATCH] allow drop privs lol

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
---
 everything-app/paperless-ngx.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/everything-app/paperless-ngx.yaml b/everything-app/paperless-ngx.yaml
index 4668a1f..dd84342 100644
--- a/everything-app/paperless-ngx.yaml
+++ b/everything-app/paperless-ngx.yaml
@@ -66,6 +66,7 @@ spec:
             add:
             - "NET_BIND_SERVICE"
             - "SETUID"
+            - "CHOWN"
         service:
           main:
             annotations: