Update Dockerfile to set user permissions and improve file ownership

Signed-off-by: Lasse Gaardsholt <[email protected]>

Author: Gaardsholt

api.Dockerfile

@@ -1,18 +1,23 @@
 # Stage 1: Build the Vue.js application
-FROM node:14 as build-stage
+FROM node:14 AS build-stage
+
+USER node
 WORKDIR /app
-COPY package*.json ./
+
+COPY --chown=1000:1000 package*.json ./
 RUN npm install
-COPY . .
+COPY --chown=1000:1000 . .
 # this will tokenize the app
 RUN npm run build
 
 # Stage 2: Prepare the Node.js API
-FROM node:14 as api-stage
+FROM node:14 AS api-stage
 WORKDIR /api
 # Copy package.json and other necessary files for the API
-COPY api/package*.json ./
-RUN npm install
+COPY --chown=1000:1000 api/package*.json ./
+RUN npm install \
+  && chown -R 1000:1000 /api
+
 # Copy the rest of your API source code
 COPY --chown=1000:1000 api/ .
 
@@ -28,4 +33,6 @@ EXPOSE 3000
 
 # Command to run your API (and serve your Vue.js app)
 RUN chmod +x /api/docker-entrypoint.api/entrypoint.sh
+
+USER node
 ENTRYPOINT ["/api/docker-entrypoint.api/entrypoint.sh"]