Updates

2026-05-10 09:46:07 +12:00
parent cfc193b713
commit 2f2466ecac
81 changed files with 2571 additions and 413 deletions
@@ -14,10 +14,18 @@ ENV NODE_ENV=production

 WORKDIR /app

+RUN addgroup --system app && adduser --system --ingroup app app
+
 COPY --from=builder /app/build ./build
 COPY --from=builder /app/package.json ./package.json
 COPY --from=builder /app/node_modules ./node_modules

+RUN chown -R app:app /app
+
+USER app
+
 EXPOSE 3000

+HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=5 CMD node -e "fetch('http://127.0.0.1:3000').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
+
 CMD ["node", "build"]