trending/FxEmbed
1
0
Fork 0
mirror of https://github.com/FxEmbed/FxEmbed.git synced 2026-10-02 01:54:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(docker): run as dedicated user and not root

Browse Source
This commit is contained in:
dangered wolf
2026-08-20 12:32:55 -04:00
parent e9acfc8744
commit 5e746c11db
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+7 -1
View File
@@ -27,8 +27,14 @@ FROM base AS runtime
ENV NODE_ENV=production
ENV WRANGLER_SEND_METRICS=false
COPY --from=build /app /app
RUN groupadd --gid 1001 fxembed \
&& useradd --uid 1001 --gid fxembed --home-dir /app --no-create-home --shell /usr/sbin/nologin fxembed
COPY --from=build --chown=fxembed:fxembed /app /app
RUN chown fxembed:fxembed /app
EXPOSE 8787
USER fxembed
CMD ["npx", "wrangler", "dev", "./dist/worker.js", "--local", "--ip", "0.0.0.0", "--port", "8787"]