This commit is contained in:
2025-06-08 17:24:43 +09:00
parent 3fee0294d9
commit e0f97dad83

View File

@ -22,19 +22,11 @@ FROM oven/bun:latest AS runtime
WORKDIR /app
# Create non-root user for security
RUN addgroup --system --gid 1001 bunjs && \
adduser --system --uid 1001 bunjs
# Copy built application from builder stage
COPY --from=builder --chown=bunjs:bunjs /app .
# Create necessary directories with proper permissions
RUN mkdir -p data public/podcast_audio && \
chown -R bunjs:bunjs data public
# Switch to non-root user
USER bunjs
RUN mkdir -p data public/podcast_audio
# Expose ports
EXPOSE 3000 3001