non-root user

Dockerfile

@@ -8,12 +8,17 @@ RUN apt-get update \
     && apt-get update \
     && apt-get install -y python3 build-essential google-chrome-stable fonts-ipafont-gothic fonts-wqy-microhei fonts-wqy-zenhei fonts-thai-tlwg fonts-kacst fonts-freefont-ttf libxss1 \
       --no-install-recommends \
-    && rm -rf /tmp/* /var/tmp/* /var/lib/apt/lists/*
+    && rm -rf /tmp/* /var/tmp/* /var/lib/apt/lists/* \
+    && groupadd -r mathweb && useradd -r -g mathweb -G audio,video mathweb \
+    && mkdir -p /home/mathweb/Downloads \
+    && chown -R mathweb:mathweb /home/mathweb
 
-WORKDIR /usr/src/app
-COPY ./package*.json ./
+USER mathweb
+
+WORKDIR /home/mathweb/app
+COPY --chown=mathweb:mathweb ./package*.json ./
 RUN npm ci
-COPY . ./
+COPY --chown=mathweb:mathweb . ./
 RUN npm run build
 
 CMD ["npm", "run", "start:prod"]