From 1b59e304b07146a012f53e2e750064c1d4763aca Mon Sep 17 00:00:00 2001
From: alexz <me@alexzaw.dev>
Date: Sat, 17 Jan 2026 15:57:53 +0000
Subject: [PATCH] fix(cistech-tunnel): add --no-sandbox for chromium running as
 root

---
 apps/cistech-tunnel/build/scripts/entrypoint.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apps/cistech-tunnel/build/scripts/entrypoint.sh b/apps/cistech-tunnel/build/scripts/entrypoint.sh
index 555deca..33270ea 100644
--- a/apps/cistech-tunnel/build/scripts/entrypoint.sh
+++ b/apps/cistech-tunnel/build/scripts/entrypoint.sh
@@ -3,6 +3,10 @@
 
 set -euo pipefail
 
+# Qt/Chromium flags for running as root
+export QTWEBENGINE_CHROMIUM_FLAGS="--no-sandbox --disable-gpu"
+export QTWEBENGINE_DISABLE_SANDBOX=1
+
 # Setup TigerVNC password file from env var (passed by runtipi)
 if [ -n "${VNC_PASSWORD:-}" ]; then
     mkdir -p /root/.vnc