From 405548d58c5613541bbb7e6feadc9c0e028497e6 Mon Sep 17 00:00:00 2001
From: Wolfgang Hottgenroth <wolfgang.hottgenroth@icloud.com>
Date: Sun, 12 Jan 2025 13:54:15 +0100
Subject: [PATCH] rootless nginx

---
 Dockerfile | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 5700089..6865e9b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,17 +1,19 @@
+# builder
 FROM hugomods/hugo:std-base-non-root AS builder
-
 ARG BASE_URL ""
-
 COPY content/ /src
-
 RUN if [ "$BASE_URL" = ""]; then hugo; else hugo -b $BASE_URL; fi 
 
-
+# server
 FROM nginx:alpine
-
 COPY --from=builder /src/public /usr/share/nginx/html
-
-EXPOSE 80
+RUN \
+  chown -R nobody:nobody /var/cache/nginx /var/log/nginx && \
+  sed -i 's/listen\s\+80;/listen 8080;/' /etc/nginx/conf.d/default.conf && \
+  sed -i 's,pid\s\+/var/run/nginx.pid;,pid /tmp/nginx.pid;,' /etc/nginx/nginx.conf
+USER nobody
+EXPOSE 8080
+