Using non root user

[Ilyes512]

• added EXPOSE labels Add EXPOSE instructions #1
• Fixed Taskfile
• Create caddy user and use that for running caddy unprivileged
• Add volume
• Write some examples/intructions Usage overview? #11 will be done in a different branch

The original PR and branch can be found here: #6 Since there were allot of changes I created a new branch and PR.

[hairyhenderson]

@Ilyes512 Is there a reason you deleted the .dockerignore file? That's a useful one to prevent unnecessary files being copied into the build context...

[Ilyes512]

(Ow wtf... did not receive a email about your reply - only noticed it after checking out some boxes)

The reason is because I think the few KB's extra that it would need to send to the build context is not going to be noticeable. I can add it back.

edit:

Hmm, I can literally replace the old content of .dockerignore with:

*

[hairyhenderson]

@Ilyes512 I'm not sure I understand why you added another docker-entrypoint.sh script in f0d0686 - how is that related to the volume thing?

[Ilyes512]

Not sure if this is the best solution, but the reason is to overwrite the /etc/caddy/Caddyfile using a (host)volume (this is usually only need while developing).

The original CMD was:

CMD [ "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile" ]

The only way to overwrite the Caddyfile is by creating a new image (with caddy as the base) and using COPY.

If you use an entrypoint script... any possible volumes will already have been mounted.

[hairyhenderson]

@Ilyes512 I'm not sure why the two are related though, if you mount a new /etc/caddy/Caddyfile into the container with a volume, using CMD works just fine.

[Ilyes512]

After @hairyhenderson's double-check and my own check the commit that added the entrypoint file has been reverted.

[hairyhenderson]

• Write some examples/intructions

@Ilyes512 I think this piece ⬆️ could probably go in a separate PR. This one's good to go, and we'll be able to get a good image built sooner 😉

[Ilyes512]

@hairyhenderson you may merge it :)