fixed permissions

k8s/deployment.yaml

@@ -76,35 +76,51 @@ spec:
               cpu: 100m
               memory: 256Mi
           volumeMounts:
-            - mountPath: /app/config/custom.js
+            - mountPath: /app/config
+              name: config-writable
+      initContainers:
+        - name: config-setup
+          image: "ghcr.io/gethomepage/homepage:latest"
+          command: ['sh', '-c']
+          args:
+            - |
+              cp -r /app/config-ro/* /app/config/ 2>/dev/null || true
+              chmod -R 755 /app/config
+              chown -R 1000:1000 /app/config
+          securityContext:
+            runAsUser: 0
+          volumeMounts:
+            - mountPath: /app/config-ro/custom.js
               name: homepage-config
               subPath: custom.js
-            - mountPath: /app/config/custom.css
+            - mountPath: /app/config-ro/custom.css
               name: homepage-config
               subPath: custom.css
-            - mountPath: /app/config/bookmarks.yaml
+            - mountPath: /app/config-ro/bookmarks.yaml
               name: homepage-config
               subPath: bookmarks.yaml
-            - mountPath: /app/config/docker.yaml
+            - mountPath: /app/config-ro/docker.yaml
               name: homepage-config
               subPath: docker.yaml
-            - mountPath: /app/config/kubernetes.yaml
+            - mountPath: /app/config-ro/kubernetes.yaml
               name: homepage-config
               subPath: kubernetes.yaml
-            - mountPath: /app/config/services.yaml
+            - mountPath: /app/config-ro/services.yaml
               name: homepage-config
               subPath: services.yaml
-            - mountPath: /app/config/settings.yaml
+            - mountPath: /app/config-ro/settings.yaml
               name: homepage-config
               subPath: settings.yaml
-            - mountPath: /app/config/widgets.yaml
+            - mountPath: /app/config-ro/widgets.yaml
               name: homepage-config
               subPath: widgets.yaml
-            - mountPath: /app/config/logs
+            - mountPath: /app/config
-              name: logs
+              name: config-writable
       volumes:
         - name: homepage-config
           configMap:
             name: homepage-config
         - name: logs
           emptyDir: {}
+        - name: config-writable
+          emptyDir: {}