From 2458af460b798e35e67761b592b255e823e75654 Mon Sep 17 00:00:00 2001 From: rjshrjndrn Date: Thu, 13 Mar 2025 17:45:27 +0100 Subject: [PATCH] feat(docker): switch to Chainguard nginx image Replace nginx:alpine with cgr.dev/chainguard/nginx base image and remove unnecessary permission changes since the Chainguard image handles permissions differently and runs with proper security defaults. --- frontend/Dockerfile | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/frontend/Dockerfile b/frontend/Dockerfile index be7a73cd2..74ee9ded5 100644 --- a/frontend/Dockerfile +++ b/frontend/Dockerfile @@ -12,7 +12,7 @@ COPY nginx.conf /etc/nginx/conf.d/default.conf # Default step in docker build -FROM nginx:alpine +FROM cgr.dev/chainguard/nginx LABEL maintainer=Rajesh ARG GIT_SHA LABEL GIT_SHA=$GIT_SHA @@ -22,10 +22,3 @@ COPY nginx.conf /etc/nginx/conf.d/default.conf ENV GIT_SHA=$GIT_SHA EXPOSE 8080 -RUN chown -R nginx:nginx /var/cache/nginx && \ - chown -R nginx:nginx /var/log/nginx && \ - chown -R nginx:nginx /etc/nginx/conf.d && \ - touch /var/run/nginx.pid && \ - chown -R nginx:nginx /var/run/nginx.pid - -USER nginx