Merge pull request #11 from jd-apprentice/feat/improvements

Feat/improvements

.github/CODEOWNERS

@@ -1 +1,4 @@
-@jd-apprentice
+# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+## Global owners
+* @jd-apprentice

.github/workflows/release.yml

@@ -20,7 +20,6 @@ jobs:
   test:
     name: test
     runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop'
     steps:
 
       - uses: actions/checkout@v4

compose.yml

@@ -2,10 +2,19 @@ version: '3.8'
 
 services:
   app_name:
+    user: 1000:1000
     build:
       context: .
       dockerfile: docker/app.Dockerfile
       network: host
     restart: always
+    security_opt:
+      - seccomp:./docker/seccomp.json
+      - no-new-privileges:true
     env_file:
-      - .env
+      - .env
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"

docker/app.Dockerfile

@@ -2,6 +2,12 @@ FROM app_name:latest AS deps
 
 FROM debian:stable
 
+ARG UID=1000
+ARG GID=1000
+
+RUN groupadd -g $GID app_user && \
+    useradd -u $UID -g $GID -m -s /bin/bash app_user
+
 RUN apt-get update && apt-get install -y \
     ## Add your dependencies here
     apt-get clean && \
@@ -14,5 +20,9 @@ RUN chmod +x /usr/local/bin/docker-entrypoint.sh
 
 COPY --from=deps /app/app_name ./app_name
 
+RUN chown -R app_user:app_user /base
+
+USER app_user
+
 ENTRYPOINT [ "/usr/local/bin/docker-entrypoint.sh" ]
 CMD [ "/base/app_name" ]