2338eaf74c1bdfd740527d8e52b4da4eae2ca110
The compose submodule now points to commit 54e0661 which adds the missing USER hermes at the end of the Hermes Dockerfile. This ensures all container processes run as uid 10000 instead of root, fixing the privilege leak where background subprocesses escaped the gosu drop and created root-owned files in ExoKortex that broke Syncthing sync.
Description
My whole infra configuration
Languages
Nix
100%