From d7b655d1229e329f1efeed76dbc95d1880433161 Mon Sep 17 00:00:00 2001
From: JJGadgets <git@jjgadgets.tech>
Date: Sun, 27 Jul 2025 12:30:09 +0800
Subject: [PATCH] fix(cyberchef): nginx rootless

---
 kube/deploy/apps/cyberchef/app/hr.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/kube/deploy/apps/cyberchef/app/hr.yaml b/kube/deploy/apps/cyberchef/app/hr.yaml
index a1607a8e..f759b04c 100644
--- a/kube/deploy/apps/cyberchef/app/hr.yaml
+++ b/kube/deploy/apps/cyberchef/app/hr.yaml
@@ -29,7 +29,7 @@ spec:
               repository: docker.io/mpepping/cyberchef
               tag: v10.19.4@sha256:91e04eaaa1ba1eac6b8e410d6f7b340e1ea0450d48ccbb52ec67ce6faa3672c5
             securityContext: &sc
-              readOnlyRootFilesystem: true
+              readOnlyRootFilesystem: false # TODO: caddy-fy CyberChef
               allowPrivilegeEscalation: false
               capabilities:
                 drop: ["ALL"]
@@ -78,8 +78,8 @@ spec:
             path: /var/cache/nginx
           - subPath: run
             path: /var/run
-          - subPath: config
-            path: /etc/nginx/conf.d
+          # - subPath: config
+          #   path: /etc/nginx/conf.d
     defaultPodOptions:
       automountServiceAccountToken: false
       enableServiceLinks: false