From acfa961cd7cfa9c20bf57ad10261ddb0391a66fe Mon Sep 17 00:00:00 2001
From: Lukas Frischknecht <hey@frischknecht.dev>
Date: Tue, 8 Feb 2022 17:27:17 +0100
Subject: [PATCH] Enable non-root container build Closes #308.

---
 .docker/Dockerfile           | 4 ++++
 .docker/Dockerfile.multiarch | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/.docker/Dockerfile b/.docker/Dockerfile
index 457a387..7dd7a1a 100644
--- a/.docker/Dockerfile
+++ b/.docker/Dockerfile
@@ -22,8 +22,12 @@ COPY --from=builder /app /app
 
 WORKDIR /app
 
+RUN chown -R node:node .
+
 EXPOSE 5005
 
+USER node
+
 ENV NODE_ENV=production
 ENV PASSWORD=flame_password
 
diff --git a/.docker/Dockerfile.multiarch b/.docker/Dockerfile.multiarch
index 1c4fb20..9087093 100644
--- a/.docker/Dockerfile.multiarch
+++ b/.docker/Dockerfile.multiarch
@@ -23,8 +23,12 @@ COPY --from=builder /app /app
 
 WORKDIR /app
 
+RUN chown -R node:node .
+
 EXPOSE 5005
 
+USER node
+
 ENV NODE_ENV=production
 ENV PASSWORD=flame_password