3 Commits

Include renames

Author	SHA1	Message	Date
jklein	b5eba4cbf1	Harden pod and container security contexts across all workloads ... Add securityContext hardening (runAsNonRoot, readOnlyRootFilesystem, capabilities drop ALL, allowPrivilegeEscalation false) to the 10 workloads that lacked it: apache-tika, cyberchef, gotenberg, homeassistant, matrix-delegation-nginx, paperless-server, paperless-consume cronjob (plus automountServiceAccountToken false), patchmon-frontend, urlaubsverwaltung and zipline. All contexts are configurable via securityContext.pod / securityContext.container in values.yaml; writable paths are provided as emptyDirs. Image-forced deviations (Home Assistant root start for s6-overlay + NET_RAW for discovery, paperless root init container for /run ownership) are documented in the charts' values.yaml. Major version bump for every changed published chart.	2026-08-21 21:49:05 +02:00
jklein	b27fcddc6f	Add resource requests/limits to paperless consume cronjob ... Configurable via smbConnection.cron.resources with minimal defaults for the busybox container. Bumps chart version to 4.4.1+up2.20.13. Fixes #10	2026-08-21 17:09:37 +02:00
jklein	0d7adfd4ed	feat(paperless-ngx): initial chart	2026-03-23 17:43:12 +01:00