|
@@ -149,11 +149,11 @@ Here is a sample `Dockerfile` doing this:
|
|
|
```dockerfile
|
|
|
FROM dunglas/frankenphp
|
|
|
|
|
|
-ARG USER=www-data
|
|
|
+ARG USER=appuser
|
|
|
|
|
|
RUN \
|
|
|
# Use "adduser -D ${USER}" for alpine based distros
|
|
|
- useradd -D ${USER}; \
|
|
|
+ useradd ${USER}; \
|
|
|
# Add additional capability to bind to port 80 and 443
|
|
|
setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/frankenphp; \
|
|
|
# Give write access to /data/caddy and /config/caddy
|
|
@@ -173,11 +173,11 @@ the webserver as a non-root user, and without the need for any capability:
|
|
|
```dockerfile
|
|
|
FROM dunglas/frankenphp
|
|
|
|
|
|
-ARG USER=www-data
|
|
|
+ARG USER=appuser
|
|
|
|
|
|
RUN \
|
|
|
# Use "adduser -D ${USER}" for alpine based distros
|
|
|
- useradd -D ${USER}; \
|
|
|
+ useradd ${USER}; \
|
|
|
# Remove default capability
|
|
|
setcap -r /usr/local/bin/frankenphp; \
|
|
|
# Give write access to /data/caddy and /config/caddy
|