Reduce docker privilages to use non-root for FE (#122)

* Update Dockerfile Signed-off-by: Arun Cherla <[email protected]> * Update nginx.conf Signed-off-by: Arun Cherla <[email protected]> * Update docker-compose.yml Signed-off-by: Arun Cherla <[email protected]> --------- Signed-off-by: Arun Cherla <[email protected]>
StreetLamb · Aug 19, 2024 · 8eb2677 · 8eb2677
1 parent 458f9f2
commit 8eb2677
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -192,7 +192,7 @@ services:
       - traefik.docker.network=traefik-public
       - traefik.constraint-label=traefik-public
 
-      - traefik.http.services.${STACK_NAME?Variable not set}-frontend.loadbalancer.server.port=80
+      - traefik.http.services.${STACK_NAME?Variable not set}-frontend.loadbalancer.server.port=8080
 
       - traefik.http.routers.${STACK_NAME?Variable not set}-frontend-http.rule=Host(`${DOMAIN?Variable not set}`, `www.${DOMAIN?Variable not set}`)
       - traefik.http.routers.${STACK_NAME?Variable not set}-frontend-http.entrypoints=http

diff --git a/frontend/Dockerfile b/frontend/Dockerfile
@@ -15,9 +15,10 @@ RUN npm run build
 
 
 # Stage 1, based on Nginx, to have only the compiled app, ready for production with Nginx
-FROM nginx:1
+FROM nginxinc/nginx-unprivileged:stable-alpine3.19
 
 COPY --from=build-stage /app/dist/ /usr/share/nginx/html
 
 COPY ./nginx.conf /etc/nginx/conf.d/default.conf
 COPY ./nginx-backend-not-found.conf /etc/nginx/extra-conf.d/backend-not-found.conf
+VOLUME ["/etc", "/tmp"]
diff --git a/frontend/nginx.conf b/frontend/nginx.conf
@@ -1,5 +1,5 @@
 server {
-  listen 80;
+  listen 8080;
 
   location / {
     root /usr/share/nginx/html;