security: add non-root user to Dockerfile (#120) #122

Merged
cal merged 2 commits from issue/120-security-add-non-root-user-to-dockerfile into main 2026-04-12 15:00:08 +00:00
Showing only changes of commit 17a39e7eca - Show all commits

View File

@ -27,8 +27,11 @@ RUN pip install --no-cache-dir --upgrade pip && \
# Copy application code
COPY ./app /usr/src/app/app
# Create directories for volumes
RUN mkdir -p /usr/src/app/storage
# Create non-root user and set up directories for volumes
RUN addgroup --system appuser && adduser --system --ingroup appuser appuser
RUN mkdir -p /usr/src/app/storage /usr/src/app/logs && \
chown -R appuser:appuser /usr/src/app
USER appuser
# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \