chore: docker

2026-04-21 09:12:48 +02:00
parent 38518f013e
commit ebb5956053
5 changed files with 229 additions and 41 deletions
@@ -61,16 +61,13 @@ ENTRYPOINT ["./entrypoint.sh"]
 # =========================================================
 FROM owasp/modsecurity-crs:nginx-alpine AS waf

-USER root
+USER nginx

 # Logs ModSecurity
 RUN mkdir -p /var/log/modsec && chown -R nginx:nginx /var/log/modsec

-# Certificats SSL
-RUN mkdir -p /etc/nginx/certs
-COPY docker/backend/certs/cert.pem /etc/nginx/certs/cert.pem
-COPY docker/backend/certs/key.pem /etc/nginx/certs/key.pem
-RUN chown -R nginx:nginx /etc/nginx/certs && chmod 640 /etc/nginx/certs/key.pem
+# Certificats SSL — montés via volume docker-compose, pas embarqués dans l'image
+RUN mkdir -p /etc/nginx/certs && chown -R nginx:nginx /etc/nginx/certs

 COPY docker/backend/nginx.conf /etc/nginx/conf.d/app.conf
 COPY docker/backend/custom-rules.conf /etc/nginx/modsec/custom-rules.conf