Run node server from app user

Carlgo11 · Jan 14, 2025 · a14e624 · a14e624
1 parent 93434bc
commit a14e624
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 3 deletions.
diff --git a/inbox/Dockerfile b/inbox/Dockerfile
@@ -15,10 +15,12 @@ ENV INBOX_TLS_CERT_PATH="/certs/inbox/cert.pem"
 ENV REDIS_HOST="redis_mail"
 ENV REDIS_PORT="6379"
 
-RUN apk add openssl
+RUN apk add openssl; adduser app -H -D
 
 WORKDIR /usr/src/inbox
 
 COPY --from=build /app /usr/src/inbox
 
+USER app
+
 ENTRYPOINT "node src/index.js 2>&1 | tee /tmp/inbox.log"
diff --git a/inbox/Dockerfile.dev b/inbox/Dockerfile.dev
@@ -15,11 +15,13 @@ ENV INBOX_TLS_CERT_PATH="/certs/inbox/cert.pem"
 ENV REDIS_HOST="redis_mail"
 ENV REDIS_PORT="6379"
 
-RUN apk add openssl
+RUN apk add openssl; adduser app -H -D
 
 WORKDIR /usr/src/inbox
 
 COPY --from=build /app /usr/src/inbox
 COPY ./smtp-server /usr/src/inbox/node_modules/@carlgo11/smtp-server
 
+USER app
+
 ENTRYPOINT "node src/index.js 2>&1 | tee /tmp/inbox.log"
diff --git a/inbox/package.json b/inbox/package.json
@@ -36,7 +36,7 @@
     "node-forge": "^1.3.1",
     "nodemailer": "^6.9.14",
     "redis": "^4.7.0",
-    "@carlgo11/smtp-server": "^0.0.7"
+    "@carlgo11/smtp-server": "^0.0.9"
   },
   "engines": {
     "node": ">=16"