diff --git a/defaults/main.yml b/defaults/main.yml index 3fe85e1..381afed 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -11,4 +11,4 @@ renovate_github_token: "" renovate_log_level: info renovate_bot_username: renovate-bot renovate_webhook_secret: "" -renovate_docker_user_group: "0:0" \ No newline at end of file +renovate_docker_user_group: "1000:1000" \ No newline at end of file diff --git a/templates/renovate.j2 b/templates/renovate.j2 index 7642adc..6c35f69 100644 --- a/templates/renovate.j2 +++ b/templates/renovate.j2 @@ -1,3 +1,3 @@ #!/bin/bash -docker run --pull always --rm -v "/etc/renovate/config.js:/usr/src/app/config.js" -v "/var/run/docker.sock:/var/run/docker.sock" --env GITHUB_COM_TOKEN="{{ renovate_github_token }}" --env LOG_LEVEL={{ renovate_log_level }} {{ renovate_image_name }}:{{ renovate_image_tag }} renovate "$@" \ No newline at end of file +docker run --pull always --rm -v "/etc/renovate/config.js:/usr/src/app/config.js" -v "/var/run/docker.sock:/var/run/docker.sock" -u "{{ renovate_docker_user_group }}" --env GITHUB_COM_TOKEN="{{ renovate_github_token }}" --env LOG_LEVEL={{ renovate_log_level }} {{ renovate_image_name }}:{{ renovate_image_tag }} renovate "$@" \ No newline at end of file