phase 16: nginx-unprivileged on 8080, helm dashboard deployment

2026-04-11 16:37:59 -07:00
parent 1fcb79503e
commit 59da3fe89e
4 changed files with 8 additions and 8 deletions
@@ -9,9 +9,9 @@ ARG VITE_SYMBOL_REGISTRY_URL=""
 ARG VITE_RISK_ENGINE_URL=""
 RUN npm run build

-# Stage 2: Serve
-FROM nginx:alpine
+# Stage 2: Serve (unprivileged nginx, runs as uid 101, port 8080)
+FROM nginxinc/nginx-unprivileged:alpine
 COPY --from=build /app/dist /usr/share/nginx/html
 COPY nginx.conf /etc/nginx/conf.d/default.conf
-EXPOSE 80
+EXPOSE 8080
 CMD ["nginx", "-g", "daemon off;"]