djoka/bentopdf
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity

fix: reverted nginx base image to use unprivileged version

Browse Source
This commit is contained in:
alam00000
2026-04-04 12:46:48 +05:30
parent 5fb6b416f3
commit ffddca2a7d
2 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
Dockerfile
View File

@@ -71,8 +71,7 @@ RUN --mount=type=secret,id=VITE_CORS_PROXY_URL \
npm run build:with-docs npm run build:with-docs
# Production stage # Production stage
# TODO@ALAM: Change to quay/nginxinc-unprivileged once 1.28.3 is available FROM quay.io/nginx/nginx-unprivileged:alpine-slim
FROM nginx:1.28.3-alpine-slim
LABEL org.opencontainers.image.source="https://github.com/alam00000/bentopdf" LABEL org.opencontainers.image.source="https://github.com/alam00000/bentopdf"
LABEL org.opencontainers.image.url="https://github.com/alam00000/bentopdf" LABEL org.opencontainers.image.url="https://github.com/alam00000/bentopdf"
@@ -83,14 +82,14 @@ ARG BASE_URL
# Set this to "true" to disable Nginx listening on IPv6 # Set this to "true" to disable Nginx listening on IPv6
ENV DISABLE_IPV6=false ENV DISABLE_IPV6=false
USER root
RUN apk upgrade --no-cache RUN apk upgrade --no-cache
USER nginx
COPY --chown=nginx:nginx --from=builder /app/dist /usr/share/nginx/html${BASE_URL%/} COPY --chown=nginx:nginx --from=builder /app/dist /usr/share/nginx/html${BASE_URL%/}
COPY --chown=nginx:nginx nginx.conf /etc/nginx/nginx.conf COPY --chown=nginx:nginx nginx.conf /etc/nginx/nginx.conf
COPY --chown=nginx:nginx --chmod=755 nginx-ipv6.sh /docker-entrypoint.d/99-disable-ipv6.sh COPY --chown=nginx:nginx --chmod=755 nginx-ipv6.sh /docker-entrypoint.d/99-disable-ipv6.sh
RUN mkdir -p /etc/nginx/tmp /var/cache/nginx && chown -R nginx:nginx /etc/nginx /var/cache/nginx RUN mkdir -p /etc/nginx/tmp && chown -R nginx:nginx /etc/nginx/tmp
USER nginx
EXPOSE 8080 EXPOSE 8080
CMD ["nginx", "-g", "daemon off;"] CMD ["nginx", "-g", "daemon off;"]

2
Dockerfile.nonroot
View File

@@ -64,7 +64,7 @@ RUN --mount=type=secret,id=VITE_CORS_PROXY_URL \
npm run build:with-docs npm run build:with-docs
# Production stage — uses standard nginx (starts as root, drops to PUID/PGID) # Production stage — uses standard nginx (starts as root, drops to PUID/PGID)
FROM nginx:1.28.3-alpine-slim FROM nginx:alpine-slim
LABEL org.opencontainers.image.source="https://github.com/alam00000/bentopdf" LABEL org.opencontainers.image.source="https://github.com/alam00000/bentopdf"
LABEL org.opencontainers.image.url="https://github.com/alam00000/bentopdf" LABEL org.opencontainers.image.url="https://github.com/alam00000/bentopdf"