platform-admin/Cibello-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

harden(docker): non-root USER i Dockerfile.admin

Browse Source
This commit is contained in:
Sven (AAMOS AI)
2026-08-11 17:29:00 +07:00
parent 125192f24a
commit c29ab778a0
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infrastructure/docker/Dockerfile.admin
+5 -1
View File
@@ -12,6 +12,10 @@ RUN pnpm install --frozen-lockfile --filter @app/admin...
RUN pnpm --filter @app/admin build RUN pnpm --filter @app/admin build
FROM nginx:alpine AS runtime FROM nginx:alpine AS runtime
RUN addgroup -S app && adduser -S app -G app
WORKDIR /app
COPY --from=builder /build/apps/admin/dist /usr/share/nginx/html COPY --from=builder /build/apps/admin/dist /usr/share/nginx/html
COPY infrastructure/docker/nginx-admin.conf /etc/nginx/conf.d/default.conf COPY infrastructure/docker/nginx-admin.conf /etc/nginx/conf.d/default.conf
EXPOSE 80 RUN chown -R app:app /usr/share/nginx/html /var/cache/nginx /var/log/nginx /etc/nginx/conf.d
USER app
EXPOSE 8080
infrastructure/docker/nginx-admin.conf
+1 -1
View File
@@ -1,5 +1,5 @@
server { server {
listen 80; listen 8080;
server_name _; server_name _;
root /usr/share/nginx/html; root /usr/share/nginx/html;
index index.html; index index.html;