diff --git a/Dockerfile b/Dockerfile index 9b9cb68acee5e27849326621fe81daa8b52b48fb..82348fe530327c6e6dce25e7d730627b5f5d8592 100644 --- a/Dockerfile +++ b/Dockerfile @@ -49,10 +49,7 @@ RUN $HOME/.yarn/bin/yarn install --ignore-engines RUN $HOME/.yarn/bin/yarn encore dev -# support running as arbitrary user which belongs to the root group -RUN mkdir /var/cache/nginx -RUN mkdir -p /var/lib/nginx/fastcgi -RUN chmod g+rwx /var/cache/nginx /var/run /var/log/nginx /var/lib/nginx + # users are not allowed to listen on priviliged ports #RUN sed -i.bak 's/listen\(.*\)80;/listen 8081;/' /etc/nginx/conf.d/default.conf @@ -62,8 +59,14 @@ EXPOSE 8081 RUN sed -i.bak 's/^user/#user/' /etc/nginx/nginx.conf RUN adduser nginx RUN addgroup nginx root +RUN mkdir /var/cache/nginx +RUN mkdir -p /var/lib/nginx/fastcgi +RUN chmod -r 777 /var/cache/nginx /var/log/nginx /var/lib/nginx + USER nginx -RUN touch /var/log/nginx/error.log +# support running as arbitrary user which belongs to the root group + + CMD ["nginx"]