diff --git a/docs/run-as-non-root-user.md b/docs/run-as-non-root-user.md index 54ffccd..1061f4c 100644 --- a/docs/run-as-non-root-user.md +++ b/docs/run-as-non-root-user.md @@ -2,7 +2,7 @@ By default the container runs the backup script as root user. There are few things you need to set to run the container as non-root user if you wish to do so. -You can use the non-root user and group `backuptool` created by the image, uid and gid are `1100`. +You can use the built-in non-root user and group, named `backuptool`, uid and gid are `1100`.
@@ -26,7 +26,41 @@ chown -R 1100:1100 /config/ exit ``` -2. Start the container with proper parameters. +2. If you want a full backup of the `rsa_key.*`, you need to allow `backuptool` user to read the `rsa_key.*`. + +**With Docker Compose** + +```shell +# enter the container +docker run --rm -it \ + --mount type=volume,source=vaultwarden-data,target=/bitwarden/data/ \ + --entrypoint=bash \ + ttionya/vaultwarden-backup:latest + +# make files readable for all users +chmod -R +r /bitwarden/data/ + +# exit the container +exit +``` + +**With Automatic Backups** + +```shell +# enter the container +docker run --rm -it \ + --volumes-from=vaultwarden \ + --entrypoint=bash \ + ttionya/vaultwarden-backup:latest + +# make files readable for all users +chmod -R +r /data/ + +# exit the container +exit +``` + +3. Start the container with proper parameters. **With Docker Compose**