From 0f7610d03f6ff2ab16bbe7c3015cf5f51877a2ad Mon Sep 17 00:00:00 2001 From: Joakim Olsson Date: Wed, 14 Oct 2026 22:26:30 +0200 Subject: [PATCH] fix: make the nginx config readable by the unprivileged user COPY keeps the source file's mode; a 600 file (local checkouts) left uid 101 unable to read it. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 5c25c65..9be20b1 100644 --- a/Dockerfile +++ b/Dockerfile @@ -16,6 +16,6 @@ COPY --from=builder /build/coverage / FROM nginxinc/nginx-unprivileged:1.31.6@sha256:1d26a516fb93b18f9c0214dc9c645054486e516f13ff09ef63d5bd5c622278a2 MAINTAINER Joakim Olsson -COPY ./nginx/nginx.conf /etc/nginx/nginx.conf -COPY ./nginx/security_headers.conf /etc/nginx/security_headers.conf +COPY --chmod=644 ./nginx/nginx.conf /etc/nginx/nginx.conf +COPY --chmod=644 ./nginx/security_headers.conf /etc/nginx/security_headers.conf COPY --from=builder /build/.output/public/ /usr/share/nginx/html/