Dont use a configmapGenerator

cluster/apps/default/cdn/configmap.yaml

@@ -0,0 +1,37 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: nginx-cdn-configmap
+  namespace: default
+data:
+  nginx.conf: |
+    events {}
+    http {
+      server {
+        listen 80 backlog=16384;
+        root /var/www/html;
+        # security headers
+        add_header X-XSS-Protection          "1; mode=block" always;
+        add_header X-Content-Type-Options    "nosniff" always;
+        add_header Referrer-Policy           "no-referrer-when-downgrade" always;
+        add_header Content-Security-Policy   "default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';" always;
+        add_header Permissions-Policy        "interest-cohort=()" always;
+        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+
+        location / {
+          root /data;
+          sendfile           on;
+          sendfile_max_chunk 128m;
+          tcp_nopush on;
+          tcp_nodelay       on;
+          keepalive_timeout 65;
+          limit_except GET HEAD { deny all; }
+          #autoindex on;
+          default_type application/octet-stream;
+          charset UTF-8;
+
+          fancyindex on;
+          fancyindex_exact_size off; # human readable file sizes
+        }
+      }
+    }

cluster/apps/default/cdn/helm-release.yaml

@@ -19,6 +19,10 @@ spec:
       repository: oci.seedno.de/seednode/nginx
       tag: latest
 
+    args:
+    - -c
+    - /config/nginx.conf
+
     service:
       main:
         ports:

cluster/apps/default/cdn/kustomization.yaml

@@ -1,9 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- ./helm-release.yaml
+- ./configmap.yaml
-configMapGenerator:
+- ./helm-release.yaml
-- name: nginx-cdn-configmap
-  namespace: default
-  files:
-  - ./nginx.conf