1 parent 431247d commit 4f7e1ccCopy full SHA for 4f7e1cc
1 file changed
frontend/Dockerfile
@@ -22,7 +22,8 @@ COPY src ./src
22
RUN npm run build
23
24
# Production stage
25
-FROM nginx:${NGINX_TAG}
+# Use unprivileged nginx: runs as UID 101, no chown needed, works with dropped capabilities
26
+FROM nginxinc/nginx-unprivileged:${NGINX_TAG}
27
28
# Copy nginx config with SPA fallback (try_files → index.html)
29
COPY nginx.conf /etc/nginx/conf.d/default.conf
0 commit comments