From bd768cfb325068175bce90ec82f68515d75afe7d Mon Sep 17 00:00:00 2001 From: Matheus-TecDev Date: Sat, 12 Sep 2026 00:21:03 -0300 Subject: [PATCH] fix: run backend services as non-root user --- backend/Dockerfile | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/backend/Dockerfile b/backend/Dockerfile index 5982a5b..fffe672 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -8,7 +8,11 @@ WORKDIR /app COPY requirements.txt . RUN pip install --no-cache-dir -r requirements.txt +RUN groupadd --gid 10001 relay \ + && useradd --uid 10001 --gid relay --create-home --shell /usr/sbin/nologin relay + COPY . . -CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"] +USER relay +CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]