fix: run postgres as uid 99/gid 100 to match Unraid NFS squash mapping

helm/shorefront/templates/backend-deployment.yaml

@@ -26,6 +26,11 @@ spec:
                 secretKeyRef:
                   name: shorefront-secret
                   key: POSTGRES_PASSWORD
+            - name: JWT_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: shorefront-secret
+                  key: JWT_SECRET_KEY
             - name: DATABASE_URL
               value: "postgresql://{{ .Values.postgres.user }}:$(POSTGRES_PASSWORD)@postgres:5432/{{ .Values.postgres.database }}"
       containers:

helm/shorefront/templates/postgres-deployment.yaml

@@ -16,6 +16,10 @@ spec:
       labels:
         app: postgres
     spec:
+      securityContext:
+        runAsUser: {{ .Values.postgres.runAsUser }}
+        runAsGroup: {{ .Values.postgres.runAsGroup }}
+        fsGroup: {{ .Values.postgres.runAsGroup }}
       containers:
         - name: postgres
           image: "{{ .Values.postgres.image }}:{{ .Values.postgres.tag }}"
@@ -35,6 +39,8 @@ spec:
                 secretKeyRef:
                   name: shorefront-secret
                   key: POSTGRES_PASSWORD
+            - name: PGDATA
+              value: /var/lib/postgresql/data/pgdata
           ports:
             - containerPort: 5432
           volumeMounts:

helm/shorefront/values.yaml

@@ -19,6 +19,9 @@ postgres:
   tag: "15-alpine"
   database: shorefront
   user: shorefront
+  # NFS squashes all writes to this uid/gid (Unraid default: nobody=99, gid=100)
+  runAsUser: 99
+  runAsGroup: 100
   resources:
     requests: { cpu: 100m, memory: 128Mi }
     limits: { cpu: 500m, memory: 512Mi }