From bd229d52a102d6c7bdfa797753209983a0ffc3b3 Mon Sep 17 00:00:00 2001
From: "Adrian A. Baumann" <ade@adebaumann.com>
Date: Sun, 1 Mar 2026 00:02:12 +0100
Subject: [PATCH] fix: run postgres as uid 99/gid 100 to match Unraid NFS
 squash mapping

---
 helm/shorefront/templates/postgres-deployment.yaml | 6 +++---
 helm/shorefront/values.yaml                        | 3 +++
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/helm/shorefront/templates/postgres-deployment.yaml b/helm/shorefront/templates/postgres-deployment.yaml
index 6bd21cd..e7859a3 100644
--- a/helm/shorefront/templates/postgres-deployment.yaml
+++ b/helm/shorefront/templates/postgres-deployment.yaml
@@ -17,9 +17,9 @@ spec:
         app: postgres
     spec:
       securityContext:
-        runAsUser: 70
-        runAsGroup: 70
-        fsGroup: 70
+        runAsUser: {{ .Values.postgres.runAsUser }}
+        runAsGroup: {{ .Values.postgres.runAsGroup }}
+        fsGroup: {{ .Values.postgres.runAsGroup }}
       containers:
         - name: postgres
           image: "{{ .Values.postgres.image }}:{{ .Values.postgres.tag }}"
diff --git a/helm/shorefront/values.yaml b/helm/shorefront/values.yaml
index 5b1fdac..49d2c13 100644
--- a/helm/shorefront/values.yaml
+++ b/helm/shorefront/values.yaml
@@ -19,6 +19,9 @@ postgres:
   tag: "15-alpine"
   database: shorefront
   user: shorefront
+  # NFS squashes all writes to this uid/gid (Unraid default: nobody=99, gid=100)
+  runAsUser: 99
+  runAsGroup: 100
   resources:
     requests: { cpu: 100m, memory: 128Mi }
     limits: { cpu: 500m, memory: 512Mi }