v9.3.1

2026-08-31 22:17:18 +02:00
parent c6c25d26c3
commit 56170ccde9
19 changed files with 485 additions and 51 deletions
@@ -16,8 +16,16 @@ services:
      CHECK_CONCURRENCY: "8"
      CHECK_RETENTION_DAYS: "30"
      HTTP_TIMEOUT_SECONDS: "10"
+      # Optional: set HOST_ROOT=/host and mount /:/host:ro for identity checks.
+      HOST_ROOT: ""
+      ALLOW_HOST_USER_MANAGEMENT: "false"
+      ALLOW_HOST_PERMISSION_MANAGEMENT: "false"
      AUDIT_RETENTION_DAYS: "180"
    volumes:
      - ./master-data:/data
      - ./master-stacks:/stacks
      - /var/run/docker.sock:/var/run/docker.sock
+      # For read-only host UID/GID + bind ownership checks:
+      # - /:/host:ro
+      # For explicit admin host-user creation only: use /:/host:rw and set
+      # ALLOW_HOST_USER_MANAGEMENT=true.