Commit graph

2 commits

Author SHA1 Message Date
thylong 32305b4d3a
feat(non-root): run container as non-root with read-only fs
This commit allows any container based on linkstack image
to be run as non-root with apache user and limit to RO the
filesystem permissions. Ensuring a much more secured runtime.
2023-12-27 17:31:07 +01:00
Théotime Lévêque 60ea64a7db
feat(config): move apache2 configuration from runtime to build time
This commit is the first of a PR that will
aim at dropping requirement to run containers
with root permissions.

This commit leverages PassEnv rather than sed &
dynamic environment substitution in the config files.
2023-12-27 12:29:50 +01:00