Migrations/neko-rooms
1
0
Fork 0
mirror of https://github.com/m1k1o/neko-rooms.git synced 2026-11-02 22:51:34 -06:00
Code Issues Packages Projects Releases Wiki Activity

add mount path whitelist to docs #34.

Browse Source
This commit is contained in:
Miroslav Šedivý
2022-01-14 23:31:53 +01:00
parent f097a7497a
commit 3a395f7ea6
1 changed files with 22 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/storage.md
+22 -2
View File
@@ -43,8 +43,28 @@ Inside storage path (e.g. `/opt/neko-rooms/data`) there will be available these
You can mount e.g. browser policies and this way customize browser.
You can always refer to [google-chrome Dockerfile](https://github.com/m1k1o/neko/blob/1800d077d8138bdb23c25028bf4201a0469f91aa/.m1k1o/google-chrome/Dockerfile). In this case, policies are mounted to `/etc/opt/chrome/policies/managed/policies.json`. So you can mount custom file to this location.
You can always refer to [google-chrome Dockerfile](https://github.com/m1k1o/neko/blob/1800d077d8138bdb23c25028bf4201a0469f91aa/.m1k1o/google-chrome/Dockerfile). In this case, policies are mounted to `/etc/opt/chrome/policies/managed/policies.json` path inside container. So you can mount custom file to this location what overwrites its content.
For this purpose, template path is correct. You can then store your policies file to e.g. `/opt/neko-rooms/data/templates/policies.json` and have it mounted.
For this purpose, template path type is recommended, as policy file should only be readonly and can be reused along multiple rooms. You can then store your policies file to e.g. `/opt/neko-rooms/data/templates/policies.json` and have it mounted to all rooms.
![Storage](storage.png)
## Mount path whitelist
If you want to mount any path from your filesystem, you need to whitelist it first.
Add it as environment variables to your docker compose:
```yaml
NEKO_ROOMS_MOUNTS_WHITELIST: "/media"
```
Or when using multiple, they can be separated white space:
```yaml
NEKO_ROOMS_MOUNTS_WHITELIST: "/home /media"
```
You can mount any path within your whitelisted path. Meaning, if you whitelisted `/home` folder you can selectively mount path e.g. `/home/ubuntu` to a room.
**NOTICE:** You could whitelist all paths on your system with `/`. From security perspective, this solution is *strongly discouraged*.