security: add non-root user to Dockerfile (#120) #122
@ -27,8 +27,11 @@ RUN pip install --no-cache-dir --upgrade pip && \
|
||||
# Copy application code
|
||||
COPY ./app /usr/src/app/app
|
||||
|
||||
# Create directories for volumes
|
||||
RUN mkdir -p /usr/src/app/storage
|
||||
# Create non-root user and set up directories for volumes
|
||||
RUN addgroup --system appuser && adduser --system --ingroup appuser appuser
|
||||
RUN mkdir -p /usr/src/app/storage /usr/src/app/logs && \
|
||||
chown -R appuser:appuser /usr/src/app
|
||||
USER appuser
|
||||
|
||||
# Health check
|
||||
HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \
|
||||
|
||||
Loading…
Reference in New Issue
Block a user