fix(docker): add cap_net_bind to the nginx binary in the docker container

2023-03-11 21:16:31 +01:00 · 2023-03-11 21:16:31 +01:00 · e7b89ae44f
parent 72a1aaa654
commit e7b89ae44f
1 changed files with 2 additions and 0 deletions
--- a/2
+++ b/2
@ -66,5 +66,7 @@ RUN chmod 0755 /docker-entrypoint.d/*.sh /etc/nginx/templates && \
    chmod -R 0644 /etc/nginx/nginx.conf && \
    chown -R nginx:nginx ./ /etc/nginx/conf.d /etc/nginx/templates && \
    rm -f /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
+# Allow the unprivileged user to run nginx on port 80 
+RUN apk add libcap && setcap cap_net_bind_service=+ep /usr/sbin/nginx
 # unprivileged user
 USER nginx