Fix LOW findings from 2026-09-24 maintenance review

- Frontend on nginx-unprivileged (non-root, container port 8080)
- Replace unmaintained passlib with bcrypt 5.0.0 (hash-compatible)
- Pass DOCS_ENABLED through to the backend container
- Raise db mem_limit to 768m for MySQL 8.4

Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
derekcandClaude Opus 5.5 committed 2026-09-25 00:01:44 -07:00
1 parent f74bc1a1ff
commit eed5a8fb12
6 files changed
+30 -12

No files matched your search

+4 -2
View File
@@ -10,11 +10,13 @@ COPY . .
RUN npm run build
# Stage 2: Serve with nginx
FROM nginx:1.30.5-alpine
FROM nginxinc/nginx-unprivileged:1.30.5-alpine
USER root
RUN apk upgrade --no-cache
USER nginx
COPY --from=builder /app/dist /usr/share/nginx/html
COPY nginx.conf /etc/nginx/conf.d/default.conf
EXPOSE 80
EXPOSE 8080