chore(docker): avoid running container as root

Author: pimuzzo

Dockerfile

@@ -1,10 +1,13 @@
 FROM node:20-alpine AS builder
 LABEL maintainer="Simone Locci <simonelocci88@gmail.com>"
 
+RUN addgroup -S appgroup && adduser -S appuser -G appgroup
+
 WORKDIR /app
 COPY . .
 RUN yarn install --immutable \
-    && yarn build
+    && yarn build \
+    && chown -R appuser:appgroup /app/docs
 
 FROM node:20-alpine
 LABEL maintainer="Simone Locci <simonelocci88@gmail.com>"
@@ -20,7 +23,10 @@ COPY --from=builder /app/package.json ./
 COPY --from=builder /app/.yarn ./.yarn
 COPY --from=builder /app/.yarnrc.yml ./.yarnrc.yml
 COPY --from=builder /app/yarn.lock ./yarn.lock
+COPY --from=builder /etc/passwd /etc/passwd
+COPY --from=builder /etc/group /etc/group
 
 EXPOSE 3000
 
+USER appuser
 CMD ["node", "dist/main"]