Mirrors/homer
1
0
Fork 0
mirror of https://github.com/bastienwirtz/homer.git synced 2026-01-23 02:15:09 +00:00
Code Releases Activity

Simplify the container starting process to allow it to run with a

Browse source 
unprivileged user
This commit is contained in:
Bastien Wirtz 2022-04-10 11:55:11 +02:00
parent cd75da69f9
commit 049f85221e
8 changed files with 53 additions and 54 deletions
Download patch file Download diff file Expand all files Collapse all files

20
Dockerfile
View file

@ -12,24 +12,28 @@ RUN yarn build
# production stage
FROM alpine:3.15
ENV USER lighttpd
ENV GROUP lighttpd
ENV GID 911
ENV UID 911
ENV GID 1000
ENV UID 1000
ENV PORT 8080
ENV SUBFOLDER "/_"
ENV INIT_ASSETS 1
RUN addgroup -S ${GROUP} -g ${GID} && adduser -D -S -u ${UID} ${USER} ${GROUP} && \
RUN addgroup -S lighttpd -g ${GID} && adduser -D -S -u ${UID} lighttpd lighttpd && \
apk add -U --no-cache lighttpd
COPY entrypoint.sh /entrypoint.sh
COPY lighttpd.conf /lighttpd.conf
WORKDIR /www
COPY --from=build-stage --chown=${USER}:${GROUP} /app/dist /www/
COPY lighttpd.conf /lighttpd.conf
COPY entrypoint.sh /entrypoint.sh
COPY --from=build-stage --chown=${UID}:${GID} /app/dist /www/
COPY --from=build-stage --chown=${USER}:${GROUP} /app/dist/assets /www/default-assets
USER ${UID}:${GID}
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD wget --no-verbose --tries=1 --spider http://127.0.0.1:${PORT}/ || exit 1
EXPOSE ${PORT}
VOLUME /www/assets
ENTRYPOINT ["/bin/sh", "/entrypoint.sh"]