From f8b69660c218ee2eea4464ad977b8ef3868f3e23 Mon Sep 17 00:00:00 2001
From: Lukas Frischknecht <hey@frischknecht.dev>
Date: Tue, 8 Feb 2022 17:27:17 +0100
Subject: [PATCH] Enable non-root container build Closes #308.

---
 .docker/Dockerfile           | 4 ++++
 .docker/Dockerfile.multiarch | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/.docker/Dockerfile b/.docker/Dockerfile
index 701547e..1e59ff4 100644
--- a/.docker/Dockerfile
+++ b/.docker/Dockerfile
@@ -22,8 +22,12 @@ COPY --from=builder /app /app
 
 WORKDIR /app
 
+RUN chown -R node:node .
+
 EXPOSE 5005
 
+USER node
+
 ENV NODE_ENV=production
 ENV PASSWORD=flame_password
 
diff --git a/.docker/Dockerfile.multiarch b/.docker/Dockerfile.multiarch
index 42f5082..df4a577 100644
--- a/.docker/Dockerfile.multiarch
+++ b/.docker/Dockerfile.multiarch
@@ -23,8 +23,12 @@ COPY --from=builder /app /app
 
 WORKDIR /app
 
+RUN chown -R node:node .
+
 EXPOSE 5005
 
+USER node
+
 ENV NODE_ENV=production
 ENV PASSWORD=flame_password