From 4f835e0560012754d7ce0b56619a97c68a297992 Mon Sep 17 00:00:00 2001 From: Joshua Hoffmann Date: Fri, 15 Dec 2023 22:28:52 +0100 Subject: [PATCH] use safer mount options for the container's files --- .../custom/matrix-bridge-hookshot/tasks/reset_encryption.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/roles/custom/matrix-bridge-hookshot/tasks/reset_encryption.yml b/roles/custom/matrix-bridge-hookshot/tasks/reset_encryption.yml index 73cd1b792..6b7f61bf7 100644 --- a/roles/custom/matrix-bridge-hookshot/tasks/reset_encryption.yml +++ b/roles/custom/matrix-bridge-hookshot/tasks/reset_encryption.yml @@ -7,6 +7,7 @@ --name={{ matrix_hookshot_container_ident }}-reset-crypto --user={{ matrix_user_uid }}:{{ matrix_user_gid }} --cap-drop=ALL - -v {{ matrix_hookshot_base_path }}/config.yml:/config.yml - {{ matrix_hookshot_docker_image }} yarn start:resetcrypto + --mount type=bind,src={{ matrix_hookshot_base_path }}/config.yml,dst=/config.yml + {{ matrix_hookshot_docker_image }} + yarn start:resetcrypto changed_when: false