From c3b61a1894d66cdeacd5bace1aa9109ebcff2a03 Mon Sep 17 00:00:00 2001
From: fheslouin <florian.heslouin@zimdeo.fr>
Date: Thu, 26 Mar 2026 09:58:09 +0100
Subject: [PATCH] fix: use docker image best practice for node user

---
 src/frontend/Dockerfile | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile
index 1d0550f0..c5ba06c7 100644
--- a/src/frontend/Dockerfile
+++ b/src/frontend/Dockerfile
@@ -1,17 +1,16 @@
 FROM node:20-alpine AS frontend-deps
 
+USER node
+
 WORKDIR /home/frontend/
 
-COPY ./src/frontend/package.json ./package.json
-COPY ./src/frontend/package-lock.json ./package-lock.json
+COPY --chown=node:node ./src/frontend/package.json ./package.json
+COPY --chown=node:node ./src/frontend/package-lock.json ./package-lock.json
 
 RUN npm ci
 
-COPY .dockerignore ./.dockerignore
-COPY ./src/frontend/ .
-
-# Ensure the directory is writable by uid 1000 (for Kubernetes security context)
-RUN chown -R 1000:1000 /home/frontend
+COPY --chown=node:node .dockerignore ./.dockerignore
+COPY --chown=node:node ./src/frontend/ .
 
 ### ---- Front-end builder image ----
 FROM frontend-deps AS meet
@@ -20,6 +19,8 @@ WORKDIR /home/frontend
 
 FROM frontend-deps AS meet-dev
 
+USER node
+
 WORKDIR /home/frontend
 
 EXPOSE 8080