fix(audiobookshelf): add temp dir for .npm (#3045)

* fix(audiobookshelf): add temp dir for .npm

* root

charts/stable/audiobookshelf/Chart.yaml

@@ -18,7 +18,7 @@ name: audiobookshelf
 sources:
 - https://hub.docker.com/r/advplyr/audiobookshelf
 - https://github.com/advplyr/audiobookshelf
-version: 2.0.8
+version: 2.0.9
 annotations:
   truecharts.org/catagories: |
     - media

charts/stable/audiobookshelf/questions.yaml

@@ -245,7 +245,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: true
+                  default: false
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:
@@ -255,7 +255,7 @@ questions:
                 label: "runAsNonRoot"
                 schema:
                   type: boolean
-                  default: true
+                  default: false
 # Include{securityContextAdvanced}
 
   - variable: podSecurityContext
@@ -270,13 +270,13 @@ questions:
           description: "The UserID of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: runAsGroup
           label: "runAsGroup"
           description: "The groupID this App of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: fsGroup
           label: "fsGroup"
           description: "The group that should own ALL storage."

charts/stable/audiobookshelf/values.yaml

@@ -12,12 +12,28 @@ env:
       name: audiobookshelf-secrets
       key: TOKEN_SECRET
 
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
+securityContext:
+  readOnlyRootFilesystem: false
+  runAsNonRoot: false
+
 service:
   main:
     ports:
       main:
         port: 10223
 
+probes:
+  liveness:
+    path: "/ping"
+  readiness:
+    path: "/ping"
+  startup:
+    path: "/ping"
+
 persistence:
   config:
     enabled: true