TrueCharts BotandGitHub
949d6061c8
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/drakkan/sftpgo](https://redirect.github.com/drakkan/sftpgo) | patch | `f31c63e` → `036a669` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>drakkan/sftpgo (ghcr.io/drakkan/sftpgo)</summary> ### [`v2.7.1`](https://redirect.github.com/drakkan/sftpgo/releases/tag/v2.7.1) [Compare Source](https://redirect.github.com/drakkan/sftpgo/compare/v2.7.0...v2.7.1) ##### New features - SFTPD: Added support for [OpenPubkey SSH](https://redirect.github.com/openpubkey/opkssh), enabling tighter integration between OpenID Connect and SFTP. ##### Bug fixes - Enforced password validation rules also when applied through a group. - Fixed an issue where JSON dumps containing command actions failed to load correctly at startup when loaded as initial data. - Data Provider: Fixed lock handling issues during migrations that could affect MySQL when migrations are executed concurrently by multiple instances. ##### Security fixes - Fixed a potential path traversal and permission bypass involving specially crafted paths. [CVE-2026-30914](https://redirect.github.com/drakkan/sftpgo/security/advisories/GHSA-m83q-5wr4-4gfp). - Fixed placeholder sanitization in group home directories and key prefixes. [CVE-2026-30915](https://redirect.github.com/drakkan/sftpgo/security/advisories/GHSA-m83q-5wr4-4gfp). ##### Backward incompatible changes - Unified path handling: Prior to this release, the backslash character (`\`) was treated differently depending on the host operating system: on Linux, it was considered a standard character within a file or directory name, while on Windows, it acted as a path separator. We have now unified path handling across all platforms. Moving forward, both forward slashes (`/`) and backslashes (`\`) are strictly evaluated as path separators, independently of the underlying OS. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvc2Z0cGdvIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==-->
111 lines
3.7 KiB
YAML
111 lines
3.7 KiB
YAML
# yaml-language-server: $schema=./values.schema.json
|
|
image:
|
|
pullPolicy: IfNotPresent
|
|
repository: ghcr.io/drakkan/sftpgo
|
|
tag: v2.7.1-plugins@sha256:036a6695a13e227300f2728ee98d62f5ad18d78495173bca1a1450278f1f783f
|
|
securityContext:
|
|
container:
|
|
runAsNonRoot: false
|
|
readOnlyRootFilesystem: false
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
service:
|
|
main:
|
|
ports:
|
|
main:
|
|
port: 2221
|
|
protocol: http
|
|
targetPort: 8080
|
|
ftpport:
|
|
enabled: true
|
|
ports:
|
|
ftpport:
|
|
enabled: true
|
|
port: 2121
|
|
protocol: http
|
|
targetPort: 2121
|
|
passiveports:
|
|
enabled: true
|
|
ports:
|
|
passiveports:
|
|
enabled: true
|
|
port: 50000
|
|
protocol: http
|
|
targetPort: 50000
|
|
sftpport:
|
|
enabled: true
|
|
ports:
|
|
sftpport:
|
|
enabled: true
|
|
port: 2022
|
|
protocol: tcp
|
|
targetPort: 2022
|
|
webdavport:
|
|
enabled: true
|
|
ports:
|
|
webdavport:
|
|
enabled: true
|
|
port: 10080
|
|
protocol: tcp
|
|
targetPort: 10080
|
|
workload:
|
|
main:
|
|
podSpec:
|
|
containers:
|
|
main:
|
|
env:
|
|
SFTPGO_COMMON__DEFENDER__ENABLED: "true"
|
|
SFTPGO_FTPD__BINDINGS__0__DEBUG: "0"
|
|
SFTPGO_FTPD__BINDINGS__0__FORCE_PASSIVE_IP: 10.0.0.10
|
|
SFTPGO_FTPD__BINDINGS__0__PORT: "2121"
|
|
SFTPGO_FTPD__PASSIVE_PORT_RANGE__END: "50100"
|
|
SFTPGO_FTPD__PASSIVE_PORT_RANGE__START: "50000"
|
|
SFTPGO_WEBDAVD__BINDINGS__0__PORT: "10080"
|
|
# plugins section
|
|
# each plugin will require couple more manual settings due to
|
|
# how they can each be combined differently. see docs on truecharts website
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-auth
|
|
SFTPGO_PLUGIN_AUTH_LDAP_URL: "ldap://192.168.1.5:389"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_BASE_DN: "dc=mylab,dc=local"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_BIND_DN: "cn=Administrator,cn=users,dc=mylab,dc=local"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_PASSWORD: "Password.123456"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_SEARCH_QUERY: "(&(objectClass=user)(sAMAccountType=805306368)(sAMAccountName=%username%))"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_GROUP_ATTRIBUTES: "memberOf"
|
|
SFTPGO_PLUGIN_AUTH_PRIMARY_GROUP_PREFIX: ""
|
|
SFTPGO_PLUGIN_AUTH_SECONDARY_GROUP_PREFIX: ""
|
|
SFTPGO_PLUGIN_AUTH_MEMBERSHIP_GROUP_PREFIX: ""
|
|
SFTPGO_PLUGIN_AUTH_REQUIRE_GROUPS: ""
|
|
SFTPGO_PLUGIN_AUTH_STARTTLS: "0"
|
|
SFTPGO_PLUGIN_AUTH_USERS_BASE_DIR: "/mnt/home"
|
|
SFTPGO_PLUGIN_AUTH_CACHE_TIME: 0
|
|
SFTPGO_PLUGIN_AUTH_SKIP_TLS_VERIFY: "0"
|
|
SFTPGO_PLUGIN_AUTH_CA_CERTIFICATES: ""
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-eventsearch
|
|
SFTPGO_PLUGIN_EVENTSEARCH_DRIVER: ""
|
|
SFTPGO_PLUGIN_EVENTSEARCH_DSN: ""
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-eventstore
|
|
SFTPGO_PLUGIN_EVENTSTORE_DRIVER: ""
|
|
SFTPGO_PLUGIN_EVENTSTORE_DSN: ""
|
|
SFTPGO_PLUGIN_EVENTSTORE_INSTANCE_ID: ""
|
|
SFTPGO_PLUGIN_EVENTSTORE_RETENTION: "0"
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-geoipfilter
|
|
SFTPGO_PLUGIN_GEOIPFILTER_DB_FILE: "/mnt/database/geolite.db"
|
|
SFTPGO_PLUGIN_GEOIPFILTER_ALLOWED_COUNTRIES: "JP"
|
|
SFTPGO_PLUGIN_GEOIPFILTER_DENIED_COUNTRIES: "KP"
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-kms
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-pubsub
|
|
|
|
persistence:
|
|
backupdirectory:
|
|
enabled: true
|
|
mountPath: /srv/sftpgo/backups
|
|
configpath:
|
|
enabled: true
|
|
mountPath: /var/lib/sftpgo
|
|
data:
|
|
enabled: true
|
|
mountPath: /srv/sftpgo/data
|
|
shareaccess:
|
|
enabled: true
|
|
mountPath: /shareaccess
|