From e547dfb5729b4cbc4c047f07a2944d29437a7d02 Mon Sep 17 00:00:00 2001
From: grafana-watcher <grafana-watcher@bojemoi.lab>
Date: Wed, 1 Jul 2026 00:20:25 +0200
Subject: [PATCH] post: commit 7286049 in bojemoi

---
 .../commits/2026-07-01-commit-7286049.md      | 40 +++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 content/posts/commits/2026-07-01-commit-7286049.md

diff --git a/content/posts/commits/2026-07-01-commit-7286049.md b/content/posts/commits/2026-07-01-commit-7286049.md
new file mode 100644
index 0000000..40573b3
--- /dev/null
+++ b/content/posts/commits/2026-07-01-commit-7286049.md
@@ -0,0 +1,40 @@
+---
+title: "[bojemoi] fix(zap-scanner): add user: root to enable NET_ADMIN for VPN routing"
+date: 2026-07-01T00:20:25+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit 7286049 par grafana-watcher dans bojemoi"
+author: "grafana-watcher"
+---
+
+## Commit `7286049`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | grafana-watcher |
+| **Hash** | `728604958e1a0573daa3df0dd99304e0ebc893de` |
+
+
+### Description
+
+The oblast-1 image drops all capabilities (CapEff=0) when running as
+non-root. Adding user: root allows route-setup.sh to replace the
+default route via wg-gateway (ProtonVPN 10.0.6.82).
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	stack/40-service-borodino.yml
+```
+
+### Diff Summary
+
+```
+ stack/40-service-borodino.yml | 1 +
+ 1 file changed, 1 insertion(+)
+```