pihole: fix perms (#348)

truenas · Sep 2, 2024 · 4175644 · 4175644
1 parent a8d5f1a
commit 4175644
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/ix-dev/stable/pihole/app.yaml b/ix-dev/stable/pihole/app.yaml
@@ -53,4 +53,4 @@ sources:
 - https://github.com/truenas/charts/tree/master/charts/pihole
 title: Pi-hole
 train: stable
-version: 1.1.2
+version: 1.1.3
diff --git a/ix-dev/stable/pihole/templates/docker-compose.yaml b/ix-dev/stable/pihole/templates/docker-compose.yaml
@@ -22,6 +22,7 @@
 {# Containers #}
 services:
   {{ values.consts.pihole_container_name }}:
+    user: "0:0"
     image: {{ ix_lib.base.utils.get_image(images=values.images, name="image") }}
     restart: unless-stopped
     deploy:
@@ -33,7 +34,7 @@ services:
     {% set caps = ix_lib.base.security.get_caps(add=["NET_ADMIN","NET_RAW","NET_BIND_SERVICE","CHOWN","DAC_OVERRIDE","FOWNER","SETGID","SETUID","SETFCAP","SETPCAP","KILL","SYS_NICE"]) %}
     cap_add: {{ caps.add | tojson }}
     cap_drop: {{ caps.drop | tojson }}
-    security_opt: {{ ix_lib.base.security.get_sec_opts() | tojson }}
+    security_opt: {{ ix_lib.base.security.get_sec_opts(remove=["no-new-privileges"]) | tojson }}
     {% if values.network.dns_opts %}
     dns_opt: {{ ix_lib.base.network.dns_opts(values.network.dns_opts) | tojson }}
     {% endif %}