diff --git a/dockerfile b/dockerfile index c48a44e3..58898133 100644 --- a/dockerfile +++ b/dockerfile @@ -8,6 +8,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ && apt-get clean \ && rm -rf /var/lib/apt/lists/* +RUN groupadd -r appuser && \ + useradd -r -g appuser -u 1000 -m -d /home/appuser -s /bin/bash appuser + WORKDIR /app COPY requirements.txt ./ @@ -16,10 +19,19 @@ RUN pip install --no-cache-dir -r requirements.txt COPY GUI/requirements.txt ./GUI/requirements.txt RUN pip install --no-cache-dir -r GUI/requirements.txt -COPY . . +COPY . . + +RUN mkdir -p /app/Video /app/logs /app/data \ + /home/appuser/.local/bin/binary \ + /home/appuser/.config && \ + chown -R appuser:appuser /app /home/appuser && \ + chmod -R 755 /app /home/appuser + +USER appuser -ENV PYTHONPATH="/app:${PYTHONPATH}" +ENV PYTHONPATH="/app: ${PYTHONPATH}" \ + HOME=/home/appuser EXPOSE 8000 -CMD ["python", "GUI/manage.py", "runserver", "0.0.0.0:8000"] \ No newline at end of file +CMD ["python", "GUI/manage.py", "runserver", "0.0.0.0:8000"]