From fbd256f90603fad58536fcca11f94c6af4a4764f Mon Sep 17 00:00:00 2001
From: Kamil Cukrowski <kamilcukrowski@gmail.com>
Date: Wed, 4 Sep 2024 08:14:20 +0200
Subject: [PATCH] Dockerfile: set user nobody:nogroup

---
 Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 0973ebaf5..1f11ddebd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,7 +19,8 @@ RUN setcap cap_net_bind_service=+ep /src/fabio
 FROM alpine:3.16
 RUN apk update && apk add --no-cache ca-certificates
 COPY --from=build /src/fabio /usr/bin
-ADD fabio.properties /etc/fabio/fabio.properties
+COPY --chown=nobody:nogroup fabio.properties /etc/fabio/fabio.properties
+USER nobody:nogroup
 EXPOSE 9998 9999
 ENTRYPOINT ["/usr/bin/fabio"]
 CMD ["-cfg", "/etc/fabio/fabio.properties"]