mirror of
https://github.com/knightcrawler-stremio/knightcrawler.git
synced 2024-12-20 03:29:51 +00:00
32 lines
839 B
Docker
32 lines
839 B
Docker
FROM node:lts-buster-slim as builder
|
|
|
|
RUN apt update && apt install -y git && rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
|
|
COPY package*.json ./
|
|
RUN npm install
|
|
COPY . .
|
|
RUN npm run build
|
|
RUN npm prune --omit=dev
|
|
|
|
FROM node:lts-buster-slim
|
|
|
|
WORKDIR /app
|
|
|
|
COPY --from=builder /app ./
|
|
|
|
ENV NODE_ENV production
|
|
ENV NODE_OPTIONS "--no-deprecation"
|
|
|
|
# CIS-DI-0001
|
|
RUN useradd -d /home/consumer -m -s /bin/bash consumer
|
|
# CIS-DI-0008
|
|
RUN chmod u-s /usr/bin/wall /usr/bin/expiry /usr/bin/chage /usr/bin/passwd /usr/bin/gpasswd /usr/bin/chsh /usr/bin/newgrp /usr/bin/chfn /sbin/unix_chkpwd /bin/su /bin/mount /bin/umount /usr/bin/chage /usr/bin/expiry /usr/bin/wall
|
|
USER consumer
|
|
|
|
EXPOSE 7001
|
|
ENTRYPOINT [ "node", "dist/main.cjs" ]
|
|
HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 \
|
|
CMD pgrep -x node > /dev/null || exit 1
|