Expose nodeport for linkding

pkg/root/root.go

@@ -1,5 +1,9 @@
 package root
 
+import (
+	core "k8s.io/api/core/v1"
+)
+
 const (
 	HYDRA_CLUSTER  = "hydra"
 	HYDRA_HOSTNAME = "hydra-0" // VPN Host
@@ -11,3 +15,9 @@ const (
 	FLUX_APPS_HYDRA_PATH    = "./apps/" + HYDRA_CLUSTER
 	FLUX_CLUSTER_HYDRA_PATH = "./clusters/" + HYDRA_CLUSTER
 )
+
+var (
+	ContainerSecurityContext = &core.SecurityContext{
+		AllowPrivilegeEscalation: new(false),
+	}
+)

pkg/root/services.go

@@ -1,13 +1,15 @@
 package root
 
 type Service struct {
-	Name  string
-	Image string
-	Port  int32
+	Name              string
+	Image             string
+	Port              int32
+	SecurityContextID int64
 }
 
 var Linkding = Service{
-	Name:  "linkding",
-	Image: "sissbruecker/linkding:1.31.0",
-	Port:  9090,
+	Name:              "linkding",
+	Image:             "sissbruecker/linkding:1.31.0",
+	Port:              9090,
+	SecurityContextID: 33, // www-data user, group and FS ID
 }