FROM ${NEXUS_PROXY_REPO}python:3.8-slim-buster
#install nginx
-RUN apt-get update
-RUN apt-get install -y nginx=1.14.*
+RUN apt-get update; apt-get install -y nginx=1.14.*
COPY app/ /usr/src/app/
COPY cert/ /usr/src/app/cert/
RUN chmod +x start.sh
+RUN groupadd -g 999 appuser && \
+ useradd -r -u 999 -g appuser appuser
+
+## add permissions for appuser user
+RUN chown -R appuser:appuser /usr/src/app/ && chmod -R 755 /usr/src/app/ && \
+ chown -R appuser:appuser /var/log/nginx && \
+ chown -R appuser:appuser /var/lib/nginx && \
+ chown -R appuser:appuser /etc/nginx/conf.d
+RUN touch /var/run/nginx.pid && \
+ chown -R appuser:appuser /var/run/nginx.pid
+
+USER appuser
+
CMD [ "./start.sh" ]