From a595a848ce61340b3a28e2760630beedb489a6dd Mon Sep 17 00:00:00 2001
From: Edward Cheng <edward@cheng.sydney>
Date: Fri, 30 Aug 2024 09:05:03 +1000
Subject: [PATCH] update Dockerfile

---
 Dockerfile | 22 +++++++++++++++++++---
 1 file changed, 19 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index ca26ef3..2c22260 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,24 @@
-FROM bitnami/java:17.0.12-10-debian-12-r4
+FROM bitnami/java:17.0.12-10-debian-12-r4 AS builder
 
-COPY target/*.jar /app/app.jar
+WORKDIR /opt
 
-COPY script/entrypoint.sh /opt/scripts/entrypoint.sh
+RUN apt update && apt upgrade -y
+
+FROM builder AS app
+
+WORKDIR /app
+
+RUN addgroup -g 1001 app && adduser -u 1001 -G app -D app
+RUN rm -rf /var/cache/apk/* \
+    && chown app /app
+
+COPY --chown=1001 --from=builder /opt /opt
+
+USER 1001
+
+COPY --chown=1001 target/*.jar /app/app.jar
+
+COPY --chown=1001 script/entrypoint.sh /opt/scripts/entrypoint.sh
 RUN chmod 0740 /opt/scripts/entrypoint.sh
 
 CMD /opt/scripts/entrypoint.sh
\ No newline at end of file