Browse Source

ci: run as node user

Signed-off-by: rare-magma <rare-magma@posteo.eu>
pull/3614/head
rare-magma 1 year ago
parent
commit
2f3258a1b8
Failed to extract signature
  1. 4
      Dockerfile

4
Dockerfile

@ -1,5 +1,4 @@
FROM --platform=$BUILDPLATFORM node:20-slim as builder FROM --platform=$BUILDPLATFORM node:20-slim as builder
ENV NODE_ENV=production
# Build application and add additional files # Build application and add additional files
WORKDIR /ghostfolio WORKDIR /ghostfolio
@ -13,7 +12,7 @@ COPY ./yarn.lock yarn.lock
COPY ./.yarnrc .yarnrc COPY ./.yarnrc .yarnrc
COPY ./prisma/schema.prisma prisma/schema.prisma COPY ./prisma/schema.prisma prisma/schema.prisma
RUN apt-get update && apt-get install -y \ RUN apt-get update && apt-get install -y --no-install-suggests \
g++ \ g++ \
git \ git \
make \ make \
@ -63,5 +62,6 @@ COPY ./docker/entrypoint.sh /ghostfolio/entrypoint.sh
COPY ./docker/healthcheck.js /ghostfolio/healthcheck.js COPY ./docker/healthcheck.js /ghostfolio/healthcheck.js
WORKDIR /ghostfolio/apps/api WORKDIR /ghostfolio/apps/api
EXPOSE ${PORT:-3333} EXPOSE ${PORT:-3333}
USER node
CMD [ "/ghostfolio/entrypoint.sh" ] CMD [ "/ghostfolio/entrypoint.sh" ]
HEALTHCHECK --interval=15s --timeout=5s --start-period=2s --retries=3 CMD [ "node", "/ghostfolio/healthcheck.js" ] HEALTHCHECK --interval=15s --timeout=5s --start-period=2s --retries=3 CMD [ "node", "/ghostfolio/healthcheck.js" ]
Loading…
Cancel
Save