Common 4.0 App Refactor Part 5 - Stavos

charts/stable/jellyfin/SCALE/ix_values.yaml

@@ -9,7 +9,12 @@ image:
   pullPolicy: IfNotPresent
   tag: 10.7.5
 
-
+podSecurityContext:
+  runAsNonRoot: true
+  runAsUser: 568
+  runAsGroup: 568
+  fsGroup: 568
+  supplementalGroups: [44, 107]
 ##
 # Most other defaults are set in questions.yaml
 # For other options please refer to the wiki, default_values.yaml or the common library chart

charts/stable/jellyfin/SCALE/questions.yaml

@@ -55,21 +55,19 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-  # Configure Time Zone
-  - variable: timezone
-    group: "Container Image"
-    label: "Timezone"
-    schema:
-      type: string
-      default: "Etc/UTC"
-      $ref:
-        - "definitions/timezone"
   - variable: env
     group: "Configuration"
     label: "Image Environment"
     schema:
       type: dict
       attrs:
+        - variable: timezone
+          label: "Timezone"
+          schema:
+            type: string
+            default: "Etc/UTC"
+            $ref:
+              - "definitions/timezone"
         - variable: UMASK
           label: "UMASK"
           description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
@@ -367,7 +365,7 @@ questions:
           description: "Additional groups this App needs access to"
           schema:
             type: list
-            default: [44, 107]
+            default: []
             items:
               - variable: Group
                 label: "Group"

charts/stable/jellyfin/values.yaml

@@ -8,8 +8,11 @@ image:
 strategy:
   type: Recreate
 
-# 44=video 107=render
 podSecurityContext:
+  runAsNonRoot: true
+  runAsUser: 568
+  runAsGroup: 568
+  fsGroup: 568
   supplementalGroups: [44, 107]
 
 service: