Security Audit Fixes: Session fixation prevention, SameSite cookies, audit log redaction, backup integrity, Docker hardening, error sanitization, rate limiting, trusted proxies, and config hardening
This commit is contained in:
parent
7fc90524b5
commit
b587fb87a9
18 changed files with 987 additions and 87 deletions
|
|
@ -13,8 +13,15 @@ COPY frontend/ ./
|
|||
RUN npm run build
|
||||
|
||||
FROM alpine:3.19
|
||||
RUN apk add --no-cache ca-certificates
|
||||
RUN apk add --no-cache ca-certificates && \
|
||||
addgroup -S traefik-gui && \
|
||||
adduser -S -G traefik-gui traefik-gui && \
|
||||
mkdir -p /app/frontend/dist /data && \
|
||||
chown -R traefik-gui:traefik-gui /app/frontend/dist /data
|
||||
COPY --from=backend /traefik-gui /usr/local/bin/traefik-gui
|
||||
COPY --from=frontend /app/frontend/dist /app/frontend/dist
|
||||
RUN chmod 755 /usr/local/bin/traefik-gui && \
|
||||
chown -R traefik-gui:traefik-gui /app/frontend/dist
|
||||
EXPOSE 8080
|
||||
USER traefik-gui
|
||||
ENTRYPOINT ["traefik-gui"]
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue