lonely-lockley / archinsight

Simplicity in Code, Power in Design
https://archinsight.org
GNU Affero General Public License v3.0
51 stars 5 forks source link

Lower user privileges in container #44

Closed lonely-lockley closed 7 months ago

lonely-lockley commented 1 year ago

Containers are built with default user now - root. This is not secure. Update Gradle build script and change user to another one with lower privileges. New user must have read-only access to filesystem except tmp for renderer and logs directory. Logs are written to stdout now, but after #39 implementation this will be needed.