admin-valentin/ceo-api
1
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

fix(security): USER node + HEALTHCHECK in production stage (SEC-013/F9/F11)

Browse source
This commit is contained in:
admin-valentin 2026-07-31 14:57:01 +00:00
parent 97c32222ce
commit 7d43bc6b70
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
Dockerfile
View file

@ -11,5 +11,9 @@ ENV NODE_ENV=production
COPY package.json package-lock.json ./ COPY package.json package-lock.json ./
RUN npm ci --legacy-peer-deps --omit=dev RUN npm ci --legacy-peer-deps --omit=dev
COPY --from=build /app/dist ./dist COPY --from=build /app/dist ./dist
RUN chown -R node:node /app
USER node
EXPOSE 3001 EXPOSE 3001
HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
CMD wget -qO- http://localhost:3001/health || exit 1
CMD ["node", "dist/main"] CMD ["node", "dist/main"]