Run the production image with a numeric user id

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Julian Appel 2026-10-30 23:04:41 +01:00
parent be8761a427
commit d5b2285d09

View file

@ -56,6 +56,7 @@ COPY --from=build --chown=node:node /app ./
RUN mkdir -p data && chown node:node data \ RUN mkdir -p data && chown node:node data \
&& rm -rf /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/corepack \ && rm -rf /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/corepack \
/usr/local/bin/npm /usr/local/bin/npx /usr/local/bin/corepack /usr/local/bin/npm /usr/local/bin/npx /usr/local/bin/corepack
USER node # UID 1000 ist der Benutzer "node" des Basis-Images (numerisch, DL3066).
USER 1000:1000
EXPOSE 3000 3001 EXPOSE 3000 3001
CMD ["node", "dist/server/index.js"] CMD ["node", "dist/server/index.js"]