From 547d14e2a9fc33261ba4449a9792ac8707d0734f Mon Sep 17 00:00:00 2001 From: Kevin McConnell Date: Mon, 16 Sep 2024 11:59:11 +0100 Subject: [PATCH] Run as the `kamal-proxy` user --- Dockerfile | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Dockerfile b/Dockerfile index 560423b..99a0aad 100644 --- a/Dockerfile +++ b/Dockerfile @@ -8,4 +8,8 @@ copy --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ copy --from=build /app/bin/kamal-proxy /usr/local/bin/ expose 80 443 +run useradd kamal-proxy +run mkdir -p /home/kamal-proxy && chown kamal-proxy:kamal-proxy /home/kamal-proxy +user kamal-proxy:kamal-proxy + cmd [ "kamal-proxy", "run" ]