cal/major-domo-database
1
0
Fork 0
Code Issues 6 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

security: add non-root user to Dockerfile (#120)

Browse Source 
Closes #120

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Cal Corum 2026-04-09 12:02:09 -05:00
parent 6972cbe610
commit 17a39e7eca
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
Dockerfile
View File

@ -27,8 +27,11 @@ RUN pip install --no-cache-dir --upgrade pip && \
# Copy application code # Copy application code
COPY ./app /usr/src/app/app COPY ./app /usr/src/app/app
# Create directories for volumes # Create non-root user and set up directories for volumes
RUN mkdir -p /usr/src/app/storage RUN addgroup --system appuser && adduser --system --ingroup appuser appuser
RUN mkdir -p /usr/src/app/storage /usr/src/app/logs && \
chown -R appuser:appuser /usr/src/app
USER appuser
# Health check # Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \ HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \