CCM-7248: fix minor issues

Author: bhansell1

Dockerfile

@@ -1,19 +1,28 @@
-FROM node:20-alpine AS base
+FROM node:20-alpine AS builder
 
 # Install necessary packages for Puppeteer
 # Installs latest Chromium (100) package.
 RUN apk add --no-cache \
-    udev \
+    chromium \
     ttf-freefont \
-    chromium
+    udev
 
 ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
 
 WORKDIR /app
 
 COPY package*.json ./
 
-RUN npm install
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+# Set permissions to add files/folders to /app
+RUN chown -R nonroot:nonroot /app
+
+# Switch to the non-root user
+USER nonroot
+
+RUN npm ci --ignore-scripts
 
 EXPOSE 3000
 

README.md

@@ -64,7 +64,7 @@
 
 5. Open your browser and go to `localhost:3000` to view the app.
 
-### Running templates and webauth projects locally
+### Running Team and IAM Web Auth projects locally
 
 Read more in the [README.md](./local/README.md).
 

local/.env.template

@@ -1,2 +1,2 @@
 TEMPLATE_MANAGEMENT_DIR='your directory path to nhs-notify-web-template-management'
-AUTH_DIR='your directory path to nhs-notify-web-iam'
+IAM_WEBAUTH_DIR='your directory path to nhs-notify-web-iam'

local/README.md

@@ -2,7 +2,7 @@
 
 This has only been tried on a mac.
 
-If this local setup proves useful for others it would be great to move this `/local` directory to it's own github repo.
+If this local setup proves useful for others it would be great to move this `/local` directory to it's own GitHub repository.
 
 ## Description
 
@@ -19,7 +19,7 @@ The `docker-compose` file is hooked up to local volume of the projects so any ch
 
 At first the application may take a few seconds to warm up. After the app has warmed up it's usually just as fast as running the application natively.
 
-If you install a new `npm` package in either webapp then you'll need to rebuild the docker images.
+If you install a new `npm` package in either web application then you'll need to rebuild the docker images.
 
 ## Requirements
 

local/nginx.conf

@@ -3,6 +3,8 @@ events {
 }
 
 http {
+    client_header_buffer_size 16k;
+
     upstream auth {
         server auth:3000;
     }