From 4d2c1b963f50c577c9b283ef53e698ba9ffd42be Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Sun, 17 Dec 2023 18:49:36 +0100
Subject: [PATCH] fix(jellyfin): Add basics to move towards PSS restricted

---
 apps/k8s01/jellyfin/deployment.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/apps/k8s01/jellyfin/deployment.yaml b/apps/k8s01/jellyfin/deployment.yaml
index bf47c70da..fd89f5be9 100644
--- a/apps/k8s01/jellyfin/deployment.yaml
+++ b/apps/k8s01/jellyfin/deployment.yaml
@@ -67,7 +67,12 @@ spec:
             amd.com/gpu: 1
             memory: 3.5Gi
             cpu: "4"
+        securityContext:
+          allowPrivilegeEscalation: false
       restartPolicy: Always
+      securityContext:
+        seccompProfile:
+          type: "RuntimeDefault"
       volumes:
       - name: movies
         persistentVolumeClaim:
-- 
GitLab