Run container as nonroot

Signed-off-by: Gregory May <[email protected]>

Author: MnrGreg

template/powershell-http/Dockerfile

@@ -9,12 +9,17 @@ COPY server.ps1 server.ps1
 
 COPY function function
 
-HEALTHCHECK --interval=1s CMD [ -e /tmp/.lock ] || exit 1
+RUN adduser --system --no-create-home --uid 10001 app
+
+USER 10001
 
 ENV fprocess="pwsh ./server.ps1"
 ENV cgi_headers="true"
 ENV mode="http"
 ENV upstream_url="http://127.0.0.1:8082"
 
 EXPOSE 8080
+
+HEALTHCHECK --interval=1s CMD [ -e /tmp/.lock ] || exit 1
+
 CMD ["fwatchdog"]