jcreek/OpenNetworkDiagram
1
0
Fork 0
mirror of https://github.com/jcreek/OpenNetworkDiagram.git synced 2026-07-12 18:43:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(#5): run container as non-root user

Browse Source
This commit is contained in:
Josh Creek
2026-02-25 21:15:21 +00:00
parent 494518c2d9
commit d333d6af4a
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+7
View File
@@ -22,12 +22,19 @@ ENV NODE_ENV=production
ENV HOST=0.0.0.0 ENV HOST=0.0.0.0
ENV PORT=3000 ENV PORT=3000
RUN addgroup -S appuser && adduser -S -G appuser appuser
COPY --from=builder /app/build ./build COPY --from=builder /app/build ./build
COPY --from=builder /app/server.mjs ./server.mjs COPY --from=builder /app/server.mjs ./server.mjs
COPY --from=builder /app/data ./data COPY --from=builder /app/data ./data
RUN chown -R appuser:appuser /app/build /app/server.mjs /app/data /app \
&& chmod -R u+rwX /app /app/data
EXPOSE 3000 EXPOSE 3000
USER appuser
HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \ HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
CMD wget -qO- http://127.0.0.1:3000/ > /dev/null || exit 1 CMD wget -qO- http://127.0.0.1:3000/ > /dev/null || exit 1