Improved security settings

guerzon / vaultwarden

Helm chart for Vaultwarden, the (unofficial) Bitwarden-compatible server written in Rust, formerly known as bitwarden_rs

MIT License

142 stars 64 forks source link

Improved security settings #61

Closed groundhog2k closed 9 months ago

groundhog2k commented 9 months ago

If possbile a pod / container should never run with root privileges. Beside securityContext the podSecurityContext was added as configuration option. Additionally (working) example values are added for these 2 sections.

Limitation: This does only work for a new vaultwarden setup. If you upgrade from a previous chart version, you need to adapt permissions on the storage volume.

guerzon commented 9 months ago

Thanks for the PR. Could you pls also solve the merge conflict? @groundhog2k