mirror of
https://github.com/jcreek/OpenNetworkDiagram.git
synced 2026-07-12 18:43:44 +00:00
fix(#5): run container as non-root user
This commit is contained in:
@@ -22,12 +22,19 @@ ENV NODE_ENV=production
|
||||
ENV HOST=0.0.0.0
|
||||
ENV PORT=3000
|
||||
|
||||
RUN addgroup -S appuser && adduser -S -G appuser appuser
|
||||
|
||||
COPY --from=builder /app/build ./build
|
||||
COPY --from=builder /app/server.mjs ./server.mjs
|
||||
COPY --from=builder /app/data ./data
|
||||
|
||||
RUN chown -R appuser:appuser /app/build /app/server.mjs /app/data /app \
|
||||
&& chmod -R u+rwX /app /app/data
|
||||
|
||||
EXPOSE 3000
|
||||
|
||||
USER appuser
|
||||
|
||||
HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
|
||||
CMD wget -qO- http://127.0.0.1:3000/ > /dev/null || exit 1
|
||||
|
||||
|
||||
Reference in New Issue
Block a user