From 9e0e4a103ab562bf90318e047e7b3d5eb5febd43 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=80=BB=E5=B7=A5?= <chief@multica.agent>
Date: Sun, 30 Aug 2026 22:52:42 +0800
Subject: [PATCH] =?UTF-8?q?HEL-271:=20=E5=8F=8D=E4=BB=A3=20tmpfs=20?=
 =?UTF-8?q?=E5=B1=9E=E4=B8=BB=E4=B8=8E=E8=BF=90=E8=A1=8C=20uid=20=E5=AF=B9?=
 =?UTF-8?q?=E9=BD=90=EF=BC=88=E4=BF=AE=E5=A4=8D=E9=9D=9E=20root=20nginx=20?=
 =?UTF-8?q?=E5=90=AF=E5=8A=A8=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: multica-agent <github@multica.ai>
---
 deploy/compose.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/deploy/compose.yaml b/deploy/compose.yaml
index bb37a7d..bbab452 100644
--- a/deploy/compose.yaml
+++ b/deploy/compose.yaml
@@ -69,8 +69,8 @@ services:
     restart: unless-stopped
     read_only: true
     tmpfs:
-      - /var/cache/nginx:size=16m
-      - /var/run:size=1m
+      - /var/cache/nginx:size=16m,uid=${PROXY_UID:-101},gid=${PROXY_GID:-101},mode=700
+      - /var/run:size=1m,uid=${PROXY_UID:-101},gid=${PROXY_GID:-101},mode=700
     security_opt:
       - no-new-privileges:true
     cap_drop: