feat: testing unpriviledged nginx (#110)

Author: nexus49

Dockerfile

@@ -9,8 +9,12 @@ COPY /frontend ./
 RUN npm run build-prod
 RUN npm run build:wc
 
-FROM nginx:alpine
+FROM nginxinc/nginx-unprivileged:alpine
+USER 101
+
+
 COPY --from=build /app/frontend/dist/ /usr/share/nginx/html/ui/example-content/ui/
 COPY --from=build /app/frontend/dist-wc/ /usr/share/nginx/html/ui/example-content/wc/
-COPY nginx.conf /etc/nginx/nginx.conf
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+
 EXPOSE 8080

frontend/package.json

@@ -4,7 +4,7 @@
   "scripts": {
     "ng": "ng",
     "start": "ng serve ui",
-    "start:wc": "ng serve wc --single-bundle --no-live-reload  --port=4201",
+    "start:wc": "ng serve wc --single-bundle --no-live-reload  --port=4201 --serve-path=/ui/example-ui/wc/ ",
     "build": "ng build ui",
     "build:wc": "ng build wc --single-bundle --output-hashing none",
     "build-prod": "ng build ui -c production",

nginx.conf

@@ -1,19 +1,12 @@
-# the events block is required
-events{}
-
-http {
-    # include the default mime.types to map file extensions to MIME types
+server {
     include /etc/nginx/mime.types;
+    add_header Access-Control-Allow-Origin *;
 
-    server {
-        add_header Access-Control-Allow-Origin *;
-        
-        listen 8080;
+    listen 8080;
 
-        root /usr/share/nginx/html;
+    root /usr/share/nginx/html;
 
-        location /ui/example-content/ui/ {
-            try_files $uri $uri/ /ui/example-content/ui/index.html =404;
-        }
+    location /ui/example-content/ui/ {
+        try_files $uri $uri/ /ui/example-content/ui/index.html =404;
     }
-}
+}