init work on disabling root processes

2021-03-13 22:52:23 +01:00
parent a2543384cd
commit 33163f65b3
22 changed files with 118 additions and 63 deletions
--- a/autoconf/Dockerfile
+++ b/autoconf/Dockerfile
@@ -8,7 +8,9 @@ RUN apk add py3-pip apache2-utils bash certbot curl logrotate openssl && \
    pip3 install docker requests && \
    mkdir /opt/entrypoint && \
    mkdir -p /opt/confs/site && \
-    mkdir -p /opt/confs/global
+    mkdir -p /opt/confs/global && \
+    addgroup -g 101 nginx && \
+    adduser -h /var/cache/nginx -g nginx -s /sbin/nologin -G nginx -D -H -u 101 nginx

 COPY confs/site/ /opt/confs/site
 COPY confs/global/ /opt/confs/global