Updated apparmor; config
This commit is contained in:
parent
de6a5e1916
commit
f6cca76a3e
@ -1,6 +1,6 @@
|
|||||||
#include <tunables/global>
|
#include <tunables/global>
|
||||||
|
|
||||||
profile 3DPrinter-OctoPrint flags=(attach_disconnected,mediate_deleted,complain) {
|
profile 3dprinter-octoprint flags=(attach_disconnected,mediate_deleted) {
|
||||||
#include <abstractions/base>
|
#include <abstractions/base>
|
||||||
|
|
||||||
# Capabilities
|
# Capabilities
|
||||||
@ -26,4 +26,18 @@ profile 3DPrinter-OctoPrint flags=(attach_disconnected,mediate_deleted,complain)
|
|||||||
|
|
||||||
# Access to options.json and other files within your addon
|
# Access to options.json and other files within your addon
|
||||||
/data/** rw,
|
/data/** rw,
|
||||||
|
|
||||||
|
# Start new profile for service
|
||||||
|
/usr/bin/caddy cx -> caddy,
|
||||||
|
|
||||||
|
profile caddy flags=(attach_disconnected,mediate_deleted) {
|
||||||
|
#include <abstractions/base>
|
||||||
|
|
||||||
|
# Receive signals from S6-Overlay
|
||||||
|
signal (receive) peer=*_3dprinter-octoprint,
|
||||||
|
|
||||||
|
capability dac_override {
|
||||||
|
/var/log/nginx* rw,
|
||||||
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
@ -13,9 +13,9 @@ ports:
|
|||||||
5000/tcp: null
|
5000/tcp: null
|
||||||
ports_description:
|
ports_description:
|
||||||
5000/tcp: Web-based interface
|
5000/tcp: Web-based interface
|
||||||
# devices:
|
devices:
|
||||||
# - /dev/mem
|
- /dev/mem
|
||||||
# - /dev/gpiomem
|
- /dev/gpiomem
|
||||||
privileged:
|
privileged:
|
||||||
- SYS_RAWIO
|
- SYS_RAWIO
|
||||||
apparmor: true
|
apparmor: true
|
||||||
@ -31,7 +31,7 @@ schema:
|
|||||||
# camera_url: "url?"
|
# camera_url: "url?"
|
||||||
# mode: "list(normal|recovery|reverse_proxy_test|camera)?"
|
# mode: "list(normal|recovery|reverse_proxy_test|camera)?"
|
||||||
image: ghcr.io/fredrikbaberg/ha-addon-3dprinter-octoprint-{arch}
|
image: ghcr.io/fredrikbaberg/ha-addon-3dprinter-octoprint-{arch}
|
||||||
codenotary: fredrik.baberg@gmail.com
|
# codenotary:
|
||||||
tmpfs: true
|
tmpfs: true
|
||||||
ingress: false
|
ingress: false
|
||||||
# ingress_stream: false
|
# ingress_stream: false
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user