mirror of
https://github.com/wukko/cobalt.git
synced 2025-04-29 14:04:25 +02:00
dockerfile: drop privileges to regular user
This commit is contained in:
parent
ea73d09c8f
commit
7b9830c5af
@ -17,8 +17,10 @@ RUN pnpm deploy --filter=@imput/cobalt-api --prod /prod/api
|
|||||||
FROM base AS api
|
FROM base AS api
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
COPY --from=build /prod/api /app
|
COPY --from=build --chown=node:node /prod/api /app
|
||||||
COPY --from=build /app/.git /app/.git
|
COPY --from=build --chown=node:node /app/.git /app/.git
|
||||||
|
|
||||||
|
USER node
|
||||||
|
|
||||||
EXPOSE 9000
|
EXPOSE 9000
|
||||||
CMD [ "node", "src/cobalt" ]
|
CMD [ "node", "src/cobalt" ]
|
||||||
|
Loading…
x
Reference in New Issue
Block a user