Merge pull request #48 from eScienceLab/docker-security

Docker security

Author: douglowe

.dockerignore

@@ -0,0 +1,27 @@
+# Git
+**/.git
+**/.github
+**/.gitignore
+**/.gitattributes
+
+
+# Environments
+example.env
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# OSX files
+**/.DS_Store
+
+# Docker
+Dockerfile
+docker-compose*
+.dockerignore
+
+# Python
+**/__pycache__

Dockerfile

@@ -7,11 +7,18 @@ WORKDIR /app
 
 COPY requirements.txt .
 RUN pip install --upgrade pip
-RUN pip install roc-validator
 RUN pip install --no-cache-dir -r requirements.txt
 
-COPY . .
+COPY cratey.py LICENSE /app/
+COPY app /app/app
+
+RUN useradd -ms /bin/bash flaskuser
+RUN chown -R flaskuser:flaskuser /app
+
+USER flaskuser
 
 EXPOSE 5000
 
 CMD ["flask", "run", "--host=0.0.0.0"]
+
+LABEL org.opencontainers.image.source="https://github.com/eScienceLab/Cratey-Validator"

requirements.txt

@@ -6,3 +6,4 @@ Werkzeug~=3.0.4
 redis~=5.2.0
 python-dotenv~=1.0.1
 apiflask~=2.4.0
+roc-validator~=0.6.5