feat: change some little security risks, add another ingress that has ip whitelist for admin panel and update some OCI image versions

This commit is contained in:
Justin Kreller
2025-05-12 23:26:29 +02:00
parent 3374dfd8f9
commit 5aa1c32fcd
9 changed files with 55 additions and 16 deletions

View File

@@ -29,7 +29,7 @@ COPY common/. ./common
RUN CGO_ENABLED=1 GOOS=linux go build -o /htwkalender-data-manager data-manager/main.go
# production stage
FROM docker.io/alpine:3.21 AS prod
FROM docker.io/alpine:3 AS prod
WORKDIR /htwkalender-data-manager
@@ -39,7 +39,7 @@ RUN adduser -Ds /bin/sh "$USER" && \
chown -R "$USER":"$USER" ./
# copies executable from build container
COPY --chown=$USER:$USER --chmod=744 --from=build /htwkalender-data-manager ./
COPY --chown=$USER:$USER --chmod=500 --from=build /htwkalender-data-manager ./
USER $USER