This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/drakkan/sftpgo](https://redirect.github.com/drakkan/sftpgo) | patch | `ef91c4f` -> `722c6cf` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>drakkan/sftpgo (ghcr.io/drakkan/sftpgo)</summary> ### [`v2.6.6`](https://redirect.github.com/drakkan/sftpgo/releases/tag/v2.6.6) [Compare Source](https://redirect.github.com/drakkan/sftpgo/compare/v2.6.5...v2.6.6) - Update golang.org/x/crypto/ssh to v0.35.0 to fix CVE-2025-22869 - CI: switch to Go 1.23 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzYuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE3Ni40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
113 lines
3.7 KiB
YAML
113 lines
3.7 KiB
YAML
image:
|
|
pullPolicy: IfNotPresent
|
|
repository: ghcr.io/drakkan/sftpgo
|
|
tag: v2.6.6-plugins@sha256:722c6cfe140d9334115e049da8cb199df346d80afe2786fea64372800f826eb4
|
|
securityContext:
|
|
container:
|
|
runAsNonRoot: false
|
|
readOnlyRootFilesystem: false
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
service:
|
|
main:
|
|
ports:
|
|
main:
|
|
port: 2221
|
|
protocol: http
|
|
targetPort: 8080
|
|
ftpport:
|
|
enabled: true
|
|
ports:
|
|
ftpport:
|
|
enabled: true
|
|
port: 2121
|
|
protocol: http
|
|
targetPort: 2121
|
|
passiveports:
|
|
enabled: true
|
|
ports:
|
|
passiveports:
|
|
enabled: true
|
|
port: 50000
|
|
protocol: http
|
|
targetPort: 50000
|
|
sftpport:
|
|
enabled: true
|
|
ports:
|
|
sftpport:
|
|
enabled: true
|
|
port: 2022
|
|
protocol: tcp
|
|
targetPort: 2022
|
|
webdavport:
|
|
enabled: true
|
|
ports:
|
|
webdavport:
|
|
enabled: true
|
|
port: 10080
|
|
protocol: tcp
|
|
targetPort: 10080
|
|
workload:
|
|
main:
|
|
podSpec:
|
|
containers:
|
|
main:
|
|
env:
|
|
SFTPGO_COMMON__DEFENDER__ENABLED: "true"
|
|
SFTPGO_FTPD__BINDINGS__0__DEBUG: "0"
|
|
SFTPGO_FTPD__BINDINGS__0__FORCE_PASSIVE_IP: 10.0.0.10
|
|
SFTPGO_FTPD__BINDINGS__0__PORT: "2121"
|
|
SFTPGO_FTPD__PASSIVE_PORT_RANGE__END: "50100"
|
|
SFTPGO_FTPD__PASSIVE_PORT_RANGE__START: "50000"
|
|
SFTPGO_WEBDAVD__BINDINGS__0__PORT: "10080"
|
|
# plugins section
|
|
# each plugin will require couple more manual settings due to
|
|
# how they can each be combined differently. see docs on truecharts website
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-auth
|
|
SFTPGO_PLUGIN_AUTH_LDAP_URL: "ldap://192.168.1.5:389"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_BASE_DN: "dc=mylab,dc=local"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_BIND_DN: "cn=Administrator,cn=users,dc=mylab,dc=local"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_PASSWORD: "Password.123456"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_SEARCH_QUERY: "(&(objectClass=user)(sAMAccountType=805306368)(sAMAccountName=%username%))"
|
|
SFTPGO_PLUGIN_AUTH_LDAP_GROUP_ATTRIBUTES: "memberOf"
|
|
SFTPGO_PLUGIN_AUTH_PRIMARY_GROUP_PREFIX: ""
|
|
SFTPGO_PLUGIN_AUTH_SECONDARY_GROUP_PREFIX: ""
|
|
SFTPGO_PLUGIN_AUTH_MEMBERSHIP_GROUP_PREFIX: ""
|
|
SFTPGO_PLUGIN_AUTH_REQUIRE_GROUPS: ""
|
|
SFTPGO_PLUGIN_AUTH_STARTTLS: "0"
|
|
SFTPGO_PLUGIN_AUTH_USERS_BASE_DIR: "/mnt/home"
|
|
SFTPGO_PLUGIN_AUTH_CACHE_TIME: 0
|
|
SFTPGO_PLUGIN_AUTH_SKIP_TLS_VERIFY: "0"
|
|
SFTPGO_PLUGIN_AUTH_CA_CERTIFICATES: ""
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-eventsearch
|
|
SFTPGO_PLUGIN_EVENTSEARCH_DRIVER: ""
|
|
SFTPGO_PLUGIN_EVENTSEARCH_DSN: ""
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-eventstore
|
|
SFTPGO_PLUGIN_EVENTSTORE_DRIVER: ""
|
|
SFTPGO_PLUGIN_EVENTSTORE_DSN: ""
|
|
SFTPGO_PLUGIN_EVENTSTORE_INSTANCE_ID: ""
|
|
SFTPGO_PLUGIN_EVENTSTORE_RETENTION: "0"
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-geoipfilter
|
|
SFTPGO_PLUGIN_GEOIPFILTER_DB_FILE: "/mnt/database/geolite.db"
|
|
SFTPGO_PLUGIN_GEOIPFILTER_ALLOWED_COUNTRIES: "JP"
|
|
SFTPGO_PLUGIN_GEOIPFILTER_DENIED_COUNTRIES: "KP"
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-kms
|
|
# ref - https://github.com/sftpgo/sftpgo-plugin-pubsub
|
|
|
|
persistence:
|
|
backupdirectory:
|
|
enabled: true
|
|
mountPath: /srv/sftpgo/backups
|
|
configpath:
|
|
enabled: true
|
|
mountPath: /var/lib/sftpgo
|
|
data:
|
|
enabled: true
|
|
mountPath: /srv/sftpgo/data
|
|
shareaccess:
|
|
enabled: true
|
|
mountPath: /shareaccess
|
|
portal:
|
|
open:
|
|
enabled: true
|