- Add entrypoint script that ensures /data is owned by node user before dropping privileges with su-exec - Remove USER node from Dockerfile (entrypoint handles it) - Change client depends_on to service_healthy so nginx waits for the server to pass its healthcheck before starting
10 lines
178 B
Bash
Executable File
10 lines
178 B
Bash
Executable File
#!/bin/sh
|
|
set -e
|
|
|
|
# Ensure data directory exists and is writable by the node user
|
|
mkdir -p /data
|
|
chown node:node /data
|
|
|
|
# Drop privileges and exec the CMD
|
|
exec su-exec node "$@"
|