fix: rollback docker user
This commit is contained in:
parent
41d41ef288
commit
68aefb4cd1
1 changed files with 3 additions and 11 deletions
14
Dockerfile
14
Dockerfile
|
|
@ -16,29 +16,21 @@ RUN npm ci --only=production --ignore-scripts
|
||||||
# Create the final stage
|
# Create the final stage
|
||||||
FROM base
|
FROM base
|
||||||
|
|
||||||
# Install system dependencies and create wwebjs user
|
# Install system dependencies
|
||||||
RUN apt-get update && \
|
RUN apt-get update && \
|
||||||
apt-get install -y --no-install-recommends \
|
apt-get install -y --no-install-recommends \
|
||||||
fonts-freefont-ttf \
|
fonts-freefont-ttf \
|
||||||
chromium \
|
chromium \
|
||||||
ffmpeg && \
|
ffmpeg && \
|
||||||
apt-get clean && \
|
apt-get clean && \
|
||||||
rm -rf /var/lib/apt/lists/* && \
|
rm -rf /var/lib/apt/lists/*
|
||||||
# Create wwebjs user and group with home directory
|
|
||||||
groupadd -r wwebjs && \
|
|
||||||
useradd -r -g wwebjs -m -d /home/wwebjs -s /bin/bash wwebjs && \
|
|
||||||
# Give ownership of the working directory to wwebjs user
|
|
||||||
chown -R wwebjs:wwebjs /usr/src/app
|
|
||||||
|
|
||||||
# Copy only production dependencies from deps stage
|
# Copy only production dependencies from deps stage
|
||||||
COPY --from=deps /usr/src/app/node_modules ./node_modules
|
COPY --from=deps /usr/src/app/node_modules ./node_modules
|
||||||
|
|
||||||
# Copy application code
|
# Copy application code
|
||||||
COPY --chown=wwebjs:wwebjs . .
|
COPY . .
|
||||||
|
|
||||||
EXPOSE 3000
|
EXPOSE 3000
|
||||||
|
|
||||||
# Use wwebjs user for better security
|
|
||||||
USER wwebjs
|
|
||||||
|
|
||||||
CMD ["npm", "start"]
|
CMD ["npm", "start"]
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue