Mount /secrets in /etc/squid/conf.d and set readonly_rootfs

2023-10-19 15:09:22 +02:00 · 2023-10-19 15:09:22 +02:00 · 4c5627e7c7
parent cc908f4b44
commit 4c5627e7c7
1 changed files with 2 additions and 1 deletions
--- a/squid.nomad.hcl
+++ b/squid.nomad.hcl
@ -20,9 +20,10 @@ job [[ $c.instance | toJSON ]] {
  
      config {
        image = [[ .squid.image | toJSON ]]
-        #readonly_rootfs = true
+        readonly_rootfs = true
        pids_limit = 100
        volumes = [
+          "secrets/:/etc/squid/conf.d",
          "local/filter-acl.sh:/entrypoint.d/30-filter-acl.sh:ro"
        ]
      }