From 31d62cd0b93481b2f3f69a9c6d42738ca2dbc0ec Mon Sep 17 00:00:00 2001
From: wizzdom <dom@wizzdom.xyz>
Date: Sat, 23 Nov 2024 02:53:07 +0000
Subject: [PATCH] hedgeodoc: add mount for banner, set default permission

---
 jobs/services/hedgedoc.hcl | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/jobs/services/hedgedoc.hcl b/jobs/services/hedgedoc.hcl
index 56680e5..9b9ddf8 100644
--- a/jobs/services/hedgedoc.hcl
+++ b/jobs/services/hedgedoc.hcl
@@ -44,6 +44,9 @@ job "hedgedoc" {
       config {
         image = "quay.io/hedgedoc/hedgedoc:1.10.0"
         ports = ["http"]
+        volumes = [
+          "/storage/nomad/hedgedoc/banner:/hedgedoc/public/banner",
+        ]
       }
 
       template {
@@ -71,7 +74,7 @@ CMD_LDAP_PROVIDERNAME       = "Redbrick"
 CMD_LDAP_USERIDFIELD        = "uidNumber"
 CMD_LDAP_USERNAMEFIELD      = "uid"
 CMD_SESSION_SECRET          = "{{ key "hedgedoc/session/secret" }}"
-CMD_DEFAULT_PERMISSION      = "private"
+CMD_DEFAULT_PERMISSION      = "limited"
 
 # Security/Privacy
 CMD_HSTS_PRELOAD            = "true"