cartsnitch/cartsnitch
12
0
Fork 1
Code Issues 16 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: run nginx as non-root user to satisfy Kubernetes runAsNonRoot #37

Merged
cartsnitch-engineer[bot] merged 2 commits from fix/non-root-nginx into main 2026-03-22 02:33:19 +00:00
Conversation 5 Commits 2 Files Changed 2
+5 -5

2 Commits

Author SHA1 Message Date
cartsnitch-engineer[bot] bea3342042 fix: update nginx listen port to 8080 for non-root operation 
Non-root users cannot bind to ports < 1024. Port 8080 is used by
nginxinc/nginx-unprivileged by default.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-03-22 01:27:31 +00:00
cartsnitch-engineer[bot] 95317884ff fix: use non-root nginx image for Kubernetes runAsNonRoot compatibility 
Switch from nginx:stable-alpine to nginxinc/nginx-unprivileged:stable-alpine.
The unprivileged image runs as nginx user (UID 101) on port 8080, satisfying
the runAsNonRoot: true security context in Kubernetes.

Fixes: https://github.com/cartsnitch/infra/issues/65

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-03-22 01:27:20 +00:00