chore: add docker

docker/backend/Dockerfile

@@ -45,7 +45,6 @@ COPY --from=builder /usr/share/zoneinfo /usr/share/zoneinfo
 COPY docker/backend/entrypoint.sh .
 RUN chmod +x entrypoint.sh
 
-# ✅ Créer le dossier uploads et donner ownership AVANT de changer d'utilisateur
 RUN mkdir -p /app/uploads/images /app/uploads/videos && \
     chown -R app:app /app
 
@@ -61,20 +60,16 @@ ENTRYPOINT ["./entrypoint.sh"]
 # =========================================================
 FROM owasp/modsecurity-crs:nginx-alpine AS waf
 
-USER nginx
+# Toutes les opérations privilégiées en root
+USER root
 
-# Logs ModSecurity
-RUN mkdir -p /var/log/modsec && chown -R nginx:nginx /var/log/modsec
-
-# Certificats SSL — montés via volume docker-compose, pas embarqués dans l'image
-RUN mkdir -p /etc/nginx/certs && chown -R nginx:nginx /etc/nginx/certs
+RUN mkdir -p /var/log/modsec /etc/nginx/certs && \
+    chown -R nginx:nginx /var/log/modsec /etc/nginx/certs /usr/share/nginx/html
 
 COPY docker/backend/nginx.conf /etc/nginx/conf.d/app.conf
 COPY docker/backend/custom-rules.conf /etc/nginx/modsec/custom-rules.conf
-RUN echo "Include /etc/nginx/modsec/custom-rules.conf" > /etc/nginx/modsec/custom-includes.conf
-
-RUN rm -f /etc/nginx/templates/conf.d/default.conf.template || true
-RUN chown -R nginx:nginx /usr/share/nginx/html
+RUN echo "Include /etc/nginx/modsec/custom-rules.conf" > /etc/nginx/modsec/custom-includes.conf && \
+    rm -f /etc/nginx/templates/conf.d/default.conf.template || true
 
 USER nginx
 EXPOSE 80 443