Merge pull request #108 from CanDIG/fnguyen/candig-user

DIG-1377: Be consistent in our use of candig user inside containers
CanDIG · Dec 21, 2023 · 312ca0b · 312ca0b
2 parents a7c0663 + c8d1773
commit 312ca0b
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -10,12 +10,17 @@ ENV TYK_KATSU_API_TARGET=$katsu_api_target_url
 
 RUN apk update && apk add gettext
 
-WORKDIR /app/candig-data-portal
-ENV PATH /app/candig-data-portal/node_modules/.bin:$PATH
-
 RUN apk add --no-cache git curl vim bash
 
-COPY . /app/candig-data-portal
+RUN addgroup -S candig && adduser -S candig -G candig
+
+COPY --chown=candig:candig . /app/candig-data-portal
+
+USER candig
+
+WORKDIR /app/candig-data-portal
+
+ENV PATH /app/candig-data-portal/node_modules/.bin:$PATH
 
 RUN npm install