Merge 46e1a7db3d into 09be5d45d5
This commit is contained in:
commit
ff4d56c59f
@ -34,6 +34,13 @@ ENV NODE_ENV=production
|
||||
# Security hardening: Run as non-root user
|
||||
# The node:22-bookworm image includes a 'node' user (uid 1000)
|
||||
# This reduces the attack surface by preventing container escape via root privileges
|
||||
# Expose moltbot CLI globally (use root entrypoint, pnpm-safe)
|
||||
|
||||
RUN printf '#!/bin/sh\nexec node /app/moltbot.mjs "$@"\n' \
|
||||
> /usr/local/bin/moltbot \
|
||||
&& chmod +x /usr/local/bin/moltbot
|
||||
|
||||
|
||||
USER node
|
||||
|
||||
CMD ["node", "dist/index.js"]
|
||||
|
||||
Loading…
Reference in New Issue
Block a user