rootless 80 another way

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
2025-03-11 16:33:30 +00:00 · 2025-03-11 16:33:30 +00:00 · 896c5cda02
commit 896c5cda02
parent 90ca469ba4
1 changed files with 5 additions and 3 deletions
--- a/everything-app/paperless-ngx.yaml
+++ b/everything-app/paperless-ngx.yaml
@ -60,9 +60,11 @@ spec:
        value: "511772986"
      valuesObject:
        securityContext:
-          sysctls:
-          - name: "net.ipv4.ip_unprivileged_port_start"
-            value: "0"
+          capabilities:
+            drop:
+            - "ALL"
+            add:
+            - "NET_BIND_SERVICE"
        service:
          main:
            annotations: