diff --git a/Dockerfile b/Dockerfile index f349935..c220a35 100644 --- a/Dockerfile +++ b/Dockerfile @@ -20,5 +20,9 @@ COPY frontend/ ./frontend/ # Expose port EXPOSE 8000 +# Run as non-root user +RUN adduser --disabled-password --gecos "" appuser +USER appuser + # Run CMD ["uvicorn", "backend.app.main:app", "--host", "0.0.0.0", "--port", "8000"] \ No newline at end of file diff --git a/backend/Dockerfile b/backend/Dockerfile index f349935..c220a35 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -20,5 +20,9 @@ COPY frontend/ ./frontend/ # Expose port EXPOSE 8000 +# Run as non-root user +RUN adduser --disabled-password --gecos "" appuser +USER appuser + # Run CMD ["uvicorn", "backend.app.main:app", "--host", "0.0.0.0", "--port", "8000"] \ No newline at end of file