use safer mount options for the container's files

spantaleev · Dec 15, 2023 · 4f835e0 · 4f835e0
1 parent 8c93327
commit 4f835e0
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/roles/custom/matrix-bridge-hookshot/tasks/reset_encryption.yml b/roles/custom/matrix-bridge-hookshot/tasks/reset_encryption.yml
@@ -7,6 +7,7 @@
       --name={{ matrix_hookshot_container_ident }}-reset-crypto
       --user={{ matrix_user_uid }}:{{ matrix_user_gid }}
       --cap-drop=ALL
-      -v {{ matrix_hookshot_base_path }}/config.yml:/config.yml
-      {{ matrix_hookshot_docker_image }} yarn start:resetcrypto
+      --mount type=bind,src={{ matrix_hookshot_base_path }}/config.yml,dst=/config.yml
+      {{ matrix_hookshot_docker_image }}
+     yarn start:resetcrypto
   changed_when: false