HEL-271: 反代 tmpfs 属主与运行 uid 对齐（修复非 root nginx 启动）

Co-authored-by: multica-agent <github@multica.ai>
2026-08-30 22:52:42 +08:00
1 changed files with 2 additions and 2 deletions
@@ -69,8 +69,8 @@ services:
    restart: unless-stopped
    read_only: true
    tmpfs:
-      - /var/cache/nginx:size=16m
-      - /var/run:size=1m
+      - /var/cache/nginx:size=16m,uid=${PROXY_UID:-101},gid=${PROXY_GID:-101},mode=700
+      - /var/run:size=1m,uid=${PROXY_UID:-101},gid=${PROXY_GID:-101},mode=700
    security_opt:
      - no-new-privileges:true
    cap_drop: