Merge pull request #2812 from nextcloud/enh/2506/make-borg-read-only

Make borgbackup read-only
nextcloud · Jun 19, 2023 · 3644e6f · 3644e6f
2 parents 417ebc5 + 571b2fe
commit 3644e6f
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/php/containers-schema.json b/php/containers-schema.json
@@ -141,7 +141,7 @@
 						"type": "array",
 						"items": {
 							"type": "string",
-							"pattern": "^/[a-z/]$"
+							"pattern": "^/[a-z/]+$"
 						}
 					},
 					"volumes": {

diff --git a/php/containers.json b/php/containers.json
@@ -410,7 +410,11 @@
       "cap_add": [
         "SYS_ADMIN"
       ],
-      "apparmor_unconfined": true
+      "apparmor_unconfined": true,
+      "read_only": true,
+      "tmpfs": [
+        "/tmp"
+      ]
     },
     {
       "container_name": "nextcloud-aio-watchtower",