mirror of
https://github.com/penpot/penpot.git
synced 2026-08-07 21:38:48 +00:00
97a833f1e7
Move Dockerfile.frontend, .backend, .exporter, .mcp and .storybook under docker/images/ from ubuntu:26.04 / nginx-unprivileged / a manual Node tarball install to Docker Hardened Images (Debian 13, or Alpine for storybook). storybook and mcp get a true non-dev runtime; frontend, backend and exporter keep the -dev tag as their final image, since each needs a shell and/or package manager at container runtime (nginx templating, fontforge/python3, and a headless-browser stack, respectively).
12 lines
422 B
Docker
12 lines
422 B
Docker
FROM dhi.io/nginx:1.31.1-alpine3.22
|
|
LABEL maintainer="Penpot <docker@penpot.app>"
|
|
|
|
ARG BUNDLE_PATH="./bundle-storybook/"
|
|
|
|
COPY --chown=65532:65532 $BUNDLE_PATH /var/www/
|
|
COPY --chown=65532:65532 ./files/nginx.storybook.conf /etc/nginx/conf.d/default.conf
|
|
|
|
# Already the default user in the DHI runtime; explicit for clarity. Numeric
|
|
# UID, not by name -- this image has no "nonroot" entry in /etc/passwd.
|
|
USER 65532:65532
|