mirror of
https://github.com/bitwarden/server.git
synced 2025-07-01 16:12:49 -05:00
docker as non-root
This commit is contained in:
@ -5,14 +5,27 @@ RUN apt-get update \
|
||||
cron \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
|
||||
RUN groupadd -g 999 bitwarden \
|
||||
&& useradd -r -u 999 -g bitwarden bitwarden
|
||||
|
||||
COPY crontab /etc/cron.d/bitwarden-cron
|
||||
RUN chmod 0644 /etc/cron.d/bitwarden-cron \
|
||||
&& touch /var/log/cron.log
|
||||
&& touch /var/log/cron.log \
|
||||
&& chown bitwarden:bitwarden /var/log/cron.log
|
||||
|
||||
COPY backup-db.sql /
|
||||
COPY backup-db.sh /
|
||||
RUN chmod +x /backup-db.sh
|
||||
|
||||
COPY entrypoint.sh /
|
||||
RUN chmod +x /entrypoint.sh
|
||||
|
||||
RUN mkdir /etc/bitwarden \
|
||||
&& chown -R bitwarden:bitwarden /etc/bitwarden \
|
||||
&& mkdir /var/opt/mssql \
|
||||
&& chown -R bitwarden:bitwarden /var/opt/mssql \
|
||||
&& chmod +x /entrypoint.sh \
|
||||
&& chmod +x /backup-db.sh \
|
||||
&& chown bitwarden:bitwarden /entrypoint.sh \
|
||||
&& chown bitwarden:bitwarden /backup-db.sh \
|
||||
&& chown bitwarden:bitwarden /backup-db.sql
|
||||
|
||||
USER bitwarden
|
||||
ENTRYPOINT ["/entrypoint.sh"]
|
||||
|
@ -1,3 +1,3 @@
|
||||
0 0 * * * root /backup-db.sh >> /var/log/cron.log 2>&1
|
||||
0 0 * * * bitwarden /backup-db.sh >> /var/log/cron.log 2>&1
|
||||
|
||||
# An empty line is required at the end of this file for a valid cron file.
|
Reference in New Issue
Block a user