From 4cc2b027c0ededd8d4501c558ffd4fc06078e13b Mon Sep 17 00:00:00 2001
From: orfelorfel23 <jannik.mueller.jannik+git@googlemail.com>
Date: Sat, 13 Jun 2026 13:49:27 +0200
Subject: [PATCH] fix(security): Schafskopf - run container as non-root node
 user

---
 Dockerfile | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 0ac5bcf..2b0561e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,9 @@
 FROM node:20-alpine
+RUN mkdir -p /app && chown -R node:node /app
 WORKDIR /app
-COPY package*.json ./
+USER node
+COPY --chown=node:node package*.json ./
 RUN npm install --omit=dev
-COPY . .
+COPY --chown=node:node . .
 EXPOSE 7849
 CMD ["node", "server/index.js"]
\ No newline at end of file