make talk-recording read-only

Signed-off-by: Simon L <szaimen@e.mail.de>
This commit is contained in:
Simon L 2023-06-26 18:18:26 +02:00
parent 6747613a34
commit 5189f0cd51
3 changed files with 10 additions and 2 deletions

View file

@ -31,6 +31,9 @@ RUN set -ex; \
touch /etc/recording.conf; \ touch /etc/recording.conf; \
chown recording:recording -R \ chown recording:recording -R \
/tmp /etc/recording.conf; \ /tmp /etc/recording.conf; \
mkdir -p /conf; \
chmod 777 /conf; \
chmod 777 /tmp; \
apk del --no-cache \ apk del --no-cache \
git \ git \
wget \ wget \
@ -40,7 +43,7 @@ RUN set -ex; \
WORKDIR /tmp WORKDIR /tmp
USER recording USER recording
ENTRYPOINT ["/start.sh"] ENTRYPOINT ["/start.sh"]
CMD ["python", "-m", "nextcloud.talk.recording", "--config", "/etc/recording.conf"] CMD ["python", "-m", "nextcloud.talk.recording", "--config", "/conf/recording.conf"]
HEALTHCHECK CMD nc -z localhost 1234 || exit 1 HEALTHCHECK CMD nc -z localhost 1234 || exit 1
LABEL com.centurylinklabs.watchtower.enable="false" LABEL com.centurylinklabs.watchtower.enable="false"

View file

@ -12,7 +12,7 @@ elif [ -z "$INTERNAL_SECRET" ]; then
exit 1 exit 1
fi fi
cat << RECORDING_CONF > "/etc/recording.conf" cat << RECORDING_CONF > "/conf/recording.conf"
[logs] [logs]
# 30 means Warning # 30 means Warning
level = 30 level = 30

View file

@ -359,6 +359,11 @@
], ],
"networks": [ "networks": [
"nextcloud-aio" "nextcloud-aio"
],
"read_only": true,
"tmpfs": [
"/tmp",
"/conf"
] ]
}, },
{ {