improve security

This commit is contained in:
lubiana 2025-06-28 16:52:26 +02:00
parent e883913d3a
commit 137e4bc0c1
Signed by: lubiana
SSH key fingerprint: SHA256:vW1EA0fRR3Fw+dD/sM0K+x3Il2gSry6YRYHqOeQwrfk
3 changed files with 8 additions and 0 deletions

View file

@ -6,7 +6,12 @@ RUN composer install --no-dev --optimize-autoloader
FROM dunglas/frankenphp
WORKDIR /app
COPY public/ ./public
COPY src/ ./src
COPY --from=composer_builder /app/vendor ./vendor
RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
RUN sed -i 's/^\s*expose_php\s*=.*/expose_php = Off/' "$PHP_INI_DIR/php.ini"
ARG USER=appuser
RUN \
# Use "adduser -D ${USER}" for alpine based distros
@ -17,6 +22,7 @@ RUN \
chown -R ${USER}:${USER} /data/caddy && chown -R ${USER}:${USER} /config/caddy
USER ${USER}
LABEL "org.opencontainers.image.description"="Cool und Lässig uuid"
LABEL "org.opencontainers.image.source"="https://git.hannover.ccc.de/lubiana/uuid"
LABEL "org.opencontainers.image.title"="UUID Service"