From 046a4215916ca15cac5022e607e79b447100653a Mon Sep 17 00:00:00 2001
From: alam00000 <adullah.alam.tapadar2000@gmail.com>
Date: Wed, 1 Apr 2026 14:08:28 +0530
Subject: [PATCH] fix: update nginx image version to 1.28.3-alpine-slim in
 Dockerfiles

---
 Dockerfile         | 7 ++++---
 Dockerfile.nonroot | 2 +-
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 106eb15..5ad05ea 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -71,7 +71,8 @@ RUN --mount=type=secret,id=VITE_CORS_PROXY_URL \
     npm run build:with-docs
 
 # Production stage
-FROM quay.io/nginx/nginx-unprivileged:stable-alpine-slim
+# TODO@ALAM: Change to quay once fixed
+FROM nginx:1.28.3-alpine-slim
 
 LABEL org.opencontainers.image.source="https://github.com/alam00000/bentopdf"
 LABEL org.opencontainers.image.url="https://github.com/alam00000/bentopdf"
@@ -82,14 +83,14 @@ ARG BASE_URL
 # Set this to "true" to disable Nginx listening on IPv6
 ENV DISABLE_IPV6=false
 
-USER root
 RUN apk upgrade --no-cache
-USER nginx
 
 COPY --chown=nginx:nginx --from=builder /app/dist /usr/share/nginx/html${BASE_URL%/}
 COPY --chown=nginx:nginx nginx.conf /etc/nginx/nginx.conf
 COPY --chown=nginx:nginx --chmod=755 nginx-ipv6.sh /docker-entrypoint.d/99-disable-ipv6.sh
 RUN mkdir -p /etc/nginx/tmp && chown -R nginx:nginx /etc/nginx/tmp
 
+USER nginx
+
 EXPOSE 8080
 CMD ["nginx", "-g", "daemon off;"]
diff --git a/Dockerfile.nonroot b/Dockerfile.nonroot
index ad0fba5..30a46e2 100644
--- a/Dockerfile.nonroot
+++ b/Dockerfile.nonroot
@@ -64,7 +64,7 @@ RUN --mount=type=secret,id=VITE_CORS_PROXY_URL \
     npm run build:with-docs
 
 # Production stage — uses standard nginx (starts as root, drops to PUID/PGID)
-FROM nginx:stable-alpine-slim
+FROM nginx:1.28.3-alpine-slim
 
 LABEL org.opencontainers.image.source="https://github.com/alam00000/bentopdf"
 LABEL org.opencontainers.image.url="https://github.com/alam00000/bentopdf"