fix: run production server without root

2026-09-11 08:13:30 +00:00
parent f86abcecb5
commit 418681d38e
2 changed files with 4 additions and 0 deletions
@@ -27,6 +27,9 @@ services:

  server:
    image: "${RVBOX_SERVER_IMAGE:?set RVBOX_SERVER_IMAGE to a pinned rvbox-server image}"
+    # The init container is the only root process. Its exact 65532 ownership
+    # setup lets the long-lived server run without host/container root power.
+    user: "65532:65532"
    restart: unless-stopped
    command: ["--config", "/etc/rvbox/server.toml"]
    read_only: true