From 89d9795581a7dc414e0abca2db26965633ecf3ba Mon Sep 17 00:00:00 2001 From: Kyrylo Shmidt Date: Mon, 21 Jul 2025 09:43:38 +0200 Subject: [PATCH] Run nginx from non-root user --- Dockerfile | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 5cd24d7a..f5fbdf5b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,3 +1,11 @@ FROM openresty/openresty:1.21.4.2-alpine - +# Create a non-root user +RUN addgroup -g 1001 appgroup && \ + adduser -D -u 1000 -G appgroup -s /bin/sh app +# Set correct permissions COPY ./dist/ /app/ +RUN chown -R app:appgroup /app +# Switch to non-root user +USER 1000:1001 +# Optional: set workdir +WORKDIR /app \ No newline at end of file