fix(secu): rootless container fix #23

fix(secu): rootless container
SocialGouv · Feb 24, 2022 · 85e529b · 85e529b
2 parents c556c9d + 34f0134
commit 85e529b
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/.socialgouv/chart/values.project.yaml b/.socialgouv/chart/values.project.yaml
diff --git a/Dockerfile b/Dockerfile
@@ -25,7 +25,13 @@ COPY . .
 RUN yarn build:export
 
 # Production image, copy all the files and run next
-FROM ghcr.io/socialgouv/docker/nginx:6.64.2 AS runner
+FROM ghcr.io/socialgouv/docker/nginx:6.70.1 AS runner
 
-COPY --from=builder /app/out /usr/share/nginx/html
+COPY --from=builder --chown=101:101 /app/out /usr/share/nginx/html
 
+# Rootless container
+USER 101
+ENV PORT=3000
+
+# Disable nextjs telemetry
+ENV NEXT_TELEMETRY_DISABLED 1