diff --git a/Dockerfile b/Dockerfile index e31c144..d498e29 100644 --- a/Dockerfile +++ b/Dockerfile @@ -22,26 +22,27 @@ FROM python:3.11-slim # Set working directory WORKDIR /app -# Install runtime dependencies +# Install runtime dependencies and create user RUN apt-get update && apt-get install -y \ wget \ curl \ && rm -rf /var/lib/apt/lists/* \ - && groupadd -r appuser && useradd -r -g appuser appuser + && groupadd -r appuser && useradd -r -g appuser appuser \ + && mkdir -p /home/appuser/.local # Copy Python packages from builder stage -COPY --from=builder /root/.local /root/.local +COPY --from=builder /root/.local /home/appuser/.local # Copy application code COPY . . # Create logs directory and set permissions -RUN mkdir -p logs && chown -R appuser:appuser /app +RUN mkdir -p logs && chown -R appuser:appuser /app /home/appuser/.local # Set environment variables ENV PYTHONUNBUFFERED=1 ENV TZ=Asia/Bangkok -ENV PATH=/root/.local/bin:$PATH +ENV PATH=/home/appuser/.local/bin:$PATH # Switch to non-root user USER appuser