Major jump 10.22.1 -> 11.4.0: the upstream image switched to nginxinc/nginx-unprivileged (serving port 80 -> 8080, pid/temp dirs under /tmp). Adjust container port, writable-volume mounts and the pod security context (sysctl net.ipv4.ip_unprivileged_port_start no longer needed). Chart major bump 4.1.0 -> 5.0.0 accordingly.