Set user ownership of static build dir

This commit is contained in:
Ben Busby 2021-07-02 16:13:42 -04:00
parent 13202cc6b1
commit 958faed1b6
No known key found for this signature in database
GPG Key ID: 339B7B7EB5333D14
2 changed files with 3 additions and 1 deletions

View File

@ -67,6 +67,9 @@ COPY app/ app/
COPY run . COPY run .
COPY whoogle.env . COPY whoogle.env .
# Allow writing symlinks to build dir
RUN chown 102:102 app/static/build
EXPOSE $EXPOSE_PORT EXPOSE $EXPOSE_PORT
HEALTHCHECK --interval=30s --timeout=5s \ HEALTHCHECK --interval=30s --timeout=5s \

View File

@ -16,7 +16,6 @@ services:
- no-new-privileges - no-new-privileges
cap_drop: cap_drop:
- ALL - ALL
read_only: true
tmpfs: tmpfs:
- /config/:size=10M,uid=102,gid=102,mode=1700 - /config/:size=10M,uid=102,gid=102,mode=1700
- /var/lib/tor/:size=10M,uid=102,gid=102,mode=1700 - /var/lib/tor/:size=10M,uid=102,gid=102,mode=1700