Run as the kamal-proxy user

basecamp · Sep 16, 2024 · 547d14e · 547d14e
1 parent 8065f92
commit 547d14e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -8,4 +8,8 @@ copy --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 copy --from=build /app/bin/kamal-proxy /usr/local/bin/
 expose 80 443
 
+run useradd kamal-proxy
+run mkdir -p /home/kamal-proxy && chown kamal-proxy:kamal-proxy /home/kamal-proxy
+user kamal-proxy:kamal-proxy
+
 cmd [ "kamal-proxy", "run" ]