Changes base image to official unprivileged NGINX

Author: Hernan Rojek Moriceau

Dockerfile

@@ -25,7 +25,7 @@ RUN yarn run build
 
 # ==== SET ENV NGINX =====
 # Bundle static assets with nginx
-FROM nginx:1.21.0-alpine as production
+FROM nginxinc/nginx-unprivileged:1.23.0-alpine as production
 ENV NODE_ENV production
 # Copy built assets from `builder` image
 COPY --from=builder /app/build /usr/share/nginx/html
@@ -35,10 +35,15 @@ COPY deployment.sh docker-entrypoint.d/.
 # Add your nginx.conf
 COPY nginx.conf /etc/nginx/conf.d/default.conf
 # Expose port
-EXPOSE 82
+EXPOSE 8000
 
 # ==== START SERVER =====
 # Start nginx
 CMD ["nginx", "-g", "daemon off;"]
-# Fails with permission denied
-# USER 2000
+
+# needed for chmod
+USER root
+# needed for write access for deployment.sh
+RUN mkdir /tmp/proxy_temp && chmod 0757 /usr/share/nginx/html/
+# reinstate the user
+USER nginx

nginx.conf

@@ -1,9 +1,8 @@
 server {
-  listen 82;
 
   location / {
     root /usr/share/nginx/html/;
     include /etc/nginx/mime.types;
     try_files $uri $uri/ /index.html;
   }
-}
+}