Security Audit Fixes: Session fixation prevention, SameSite cookies, audit log redaction, backup integrity, Docker hardening, error sanitization, rate limiting, trusted proxies, and config hardening

This commit is contained in:
backup 2026-09-03 23:55:25 -05:00
commit b587fb87a9
18 changed files with 987 additions and 87 deletions

View file

@ -13,8 +13,15 @@ COPY frontend/ ./
RUN npm run build
FROM alpine:3.19
RUN apk add --no-cache ca-certificates
RUN apk add --no-cache ca-certificates && \
addgroup -S traefik-gui && \
adduser -S -G traefik-gui traefik-gui && \
mkdir -p /app/frontend/dist /data && \
chown -R traefik-gui:traefik-gui /app/frontend/dist /data
COPY --from=backend /traefik-gui /usr/local/bin/traefik-gui
COPY --from=frontend /app/frontend/dist /app/frontend/dist
RUN chmod 755 /usr/local/bin/traefik-gui && \
chown -R traefik-gui:traefik-gui /app/frontend/dist
EXPOSE 8080
USER traefik-gui
ENTRYPOINT ["traefik-gui"]