From e0c7b7b8605f866d1151c31dee0e8a3455dc9f0c Mon Sep 17 00:00:00 2001
From: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Date: Sat, 2 Jul 2022 18:40:16 +0300
Subject: [PATCH] fix(audiobookshelf): add temp dir for .npm (#3045)

* fix(audiobookshelf): add temp dir for .npm

* root
---
 charts/stable/audiobookshelf/Chart.yaml     |  2 +-
 charts/stable/audiobookshelf/questions.yaml |  8 ++++----
 charts/stable/audiobookshelf/values.yaml    | 16 ++++++++++++++++
 3 files changed, 21 insertions(+), 5 deletions(-)

diff --git a/charts/stable/audiobookshelf/Chart.yaml b/charts/stable/audiobookshelf/Chart.yaml
index 2d1ca1a6361..8349ba02d8f 100644
--- a/charts/stable/audiobookshelf/Chart.yaml
+++ b/charts/stable/audiobookshelf/Chart.yaml
@@ -18,7 +18,7 @@ name: audiobookshelf
 sources:
 - https://hub.docker.com/r/advplyr/audiobookshelf
 - https://github.com/advplyr/audiobookshelf
-version: 2.0.8
+version: 2.0.9
 annotations:
   truecharts.org/catagories: |
     - media
diff --git a/charts/stable/audiobookshelf/questions.yaml b/charts/stable/audiobookshelf/questions.yaml
index 3c2d64a8999..22258a887e5 100644
--- a/charts/stable/audiobookshelf/questions.yaml
+++ b/charts/stable/audiobookshelf/questions.yaml
@@ -245,7 +245,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: true
+                  default: false
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:
@@ -255,7 +255,7 @@ questions:
                 label: "runAsNonRoot"
                 schema:
                   type: boolean
-                  default: true
+                  default: false
 # Include{securityContextAdvanced}
 
   - variable: podSecurityContext
@@ -270,13 +270,13 @@ questions:
           description: "The UserID of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: runAsGroup
           label: "runAsGroup"
           description: "The groupID this App of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: fsGroup
           label: "fsGroup"
           description: "The group that should own ALL storage."
diff --git a/charts/stable/audiobookshelf/values.yaml b/charts/stable/audiobookshelf/values.yaml
index 73f2767bd46..4bf9615ae7e 100644
--- a/charts/stable/audiobookshelf/values.yaml
+++ b/charts/stable/audiobookshelf/values.yaml
@@ -12,12 +12,28 @@ env:
       name: audiobookshelf-secrets
       key: TOKEN_SECRET
 
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
+securityContext:
+  readOnlyRootFilesystem: false
+  runAsNonRoot: false
+
 service:
   main:
     ports:
       main:
         port: 10223
 
+probes:
+  liveness:
+    path: "/ping"
+  readiness:
+    path: "/ping"
+  startup:
+    path: "/ping"
+
 persistence:
   config:
     enabled: true