Compare commits

4 Commits

Author SHA1 Message Date
acoolname 7158764d2c fix(browser): change auth method to noauth
Build and Push Docker Image / Build image (push) Successful in 1m45s
2026-06-22 20:12:02 +00:00
acoolname 1f611efed0 fix(browser): set group mount policy
Build and Push Docker Image / Build image (push) Successful in 1m46s
2026-06-22 20:01:03 +00:00
acoolname 935861a107 fix(file-browser): change auth mode to proxy
Build and Push Docker Image / Build image (push) Successful in 1m48s
2026-06-22 19:42:52 +00:00
acoolname 926828a2dc fix(filebrowser): add admin perm to users
Build and Push Docker Image / Build image (push) Successful in 1m49s
2026-01-10 22:14:51 +02:00
@@ -528,6 +528,9 @@ func (r *ServerManagerReconciler) BrowserPod(s *servermanagerv1alpha1.ServerMana
Protocol: port.Protocol, Protocol: port.Protocol,
} }
} }
var fsGroupValue int64 = 2000
var runAsUserValue int64 = 1000
policy := corev1.FSGroupChangeOnRootMismatch // Optimizes startup speed
pod := &corev1.Pod{ pod := &corev1.Pod{
ObjectMeta: metav1.ObjectMeta{ ObjectMeta: metav1.ObjectMeta{
@@ -536,6 +539,12 @@ func (r *ServerManagerReconciler) BrowserPod(s *servermanagerv1alpha1.ServerMana
Labels: map[string]string{"browser": s.Name}, Labels: map[string]string{"browser": s.Name},
}, },
Spec: corev1.PodSpec{ Spec: corev1.PodSpec{
SecurityContext: &corev1.PodSecurityContext{
FSGroup: &fsGroupValue,
RunAsUser: &runAsUserValue,
RunAsGroup: &fsGroupValue,
FSGroupChangePolicy: &policy,
},
Volumes: []corev1.Volume{ Volumes: []corev1.Volume{
{ {
Name: "volume", Name: "volume",
@@ -561,7 +570,7 @@ func (r *ServerManagerReconciler) BrowserPod(s *servermanagerv1alpha1.ServerMana
ImagePullPolicy: corev1.PullIfNotPresent, ImagePullPolicy: corev1.PullIfNotPresent,
Ports: ports, Ports: ports,
Command: []string{"/bin/sh"}, Command: []string{"/bin/sh"},
Args: []string{"-c", fmt.Sprintf("rm /tmp/database/filebrowser.db; filebrowser config init -d /tmp/database/filebrowser.db && filebrowser config set --auth.method=proxy --auth.header=%s -d /tmp/database/filebrowser.db", r.Config.Browser.AuthHeader)}, Args: []string{"-c", fmt.Sprintf("rm /tmp/database/filebrowser.db; filebrowser config init -d /tmp/database/filebrowser.db && filebrowser config set --auth.method=noauth --auth.header=%s -d /tmp/database/filebrowser.db", r.Config.Browser.AuthHeader)},
VolumeMounts: []corev1.VolumeMount{ VolumeMounts: []corev1.VolumeMount{
{ {
Name: "browser-volume", Name: "browser-volume",