Publish curated Unraid-AppOps-Gateway source from ad0a390e431166c3198a2ac3bec010c2b44f2dea

backend/app/schemas/deployment.py

@@ -34,7 +34,9 @@ _SAFE_PATH = re.compile(
     r"^(?!/)(?!.*(?:^|/)\.\.(?:/|$))(?:[A-Za-z0-9]|\.[A-Za-z0-9])[A-Za-z0-9_./-]{0,239}$"
 )
 
-TRUSTED_APPCONFIG_ROOT = "/srv/example/appdata"
+LEGACY_APPCONFIG_ROOT = "/srv/example/appdata"
+MANAGED_APPCONFIG_ROOT = "/var/lib/docker/volumes/itworx-managed-appdata/_data"
+TRUSTED_APPCONFIG_ROOTS = (LEGACY_APPCONFIG_ROOT, MANAGED_APPCONFIG_ROOT)
 
 
 class _StrictModel(BaseModel):
@@ -177,6 +179,10 @@ class DeploymentPlanV1(_StrictModel):
     image_repository: str
     image_tag: str
     topology: DeploymentTopologyV1
+    trusted_appdata_root: Literal[
+        "/srv/example/appdata",
+        "/var/lib/docker/volumes/itworx-managed-appdata/_data",
+    ] = LEGACY_APPCONFIG_ROOT
     proxy: ProxyHostV1 | None = None
     oidc: OidcProvisioningV1 | None = None
     health_path: str = "/healthz"
@@ -257,7 +263,7 @@ class DeploymentPlanV1(_StrictModel):
 
     @property
     def appdata_path(self) -> str:
-        return f"{TRUSTED_APPCONFIG_ROOT}/{self.application_id}"
+        return f"{self.trusted_appdata_root}/{self.application_id}"
 
     @property
     def public_url(self) -> str | None: