From 250df445f04c76c9bb6c9a970dc4412654ebe97f Mon Sep 17 00:00:00 2001
From: 3252a8 <3252a8@proton.me>
Date: Sun, 26 Apr 2026 19:47:56 +0300
Subject: [PATCH] docker: run app as non-root user

---
 Dockerfile | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 37a374a..a5346d1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,11 +10,17 @@ RUN --mount=type=cache,target=/root/.cache/pip \
 FROM python:3.12-slim
 
 WORKDIR /app
- 
+
+RUN useradd -u 10001 -m appuser
+
 COPY --from=builder /usr/local/lib/python3.12/site-packages /usr/local/lib/python3.12/site-packages
 
 COPY . .
 
 RUN rm -rf /root/.cache
 
+RUN mkdir -p /app/logs /app/data && chown -R appuser:appuser /app/logs /app/data
+
+USER appuser
+
 CMD ["python", "main.py"]