diff --git a/docker/Dockerfile b/docker/Dockerfile index 378fffbf..c0d71d55 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -51,6 +51,10 @@ RUN chmod 644 /etc/logrotate.d/nginx-proxy-manager RUN pip uninstall --yes setuptools \ && pip install "setuptools==58.0.0" +RUN groupmod -g 1000 users \ + && useradd -u 911 -U -d /data -s /bin/false abc \ + && usermod -G users abc + VOLUME [ "/data", "/etc/letsencrypt" ] ENTRYPOINT [ "/init" ] diff --git a/docker/rootfs/etc/cont-init.d/01_perms.sh b/docker/rootfs/etc/cont-init.d/01_perms.sh deleted file mode 100755 index e7875d32..00000000 --- a/docker/rootfs/etc/cont-init.d/01_perms.sh +++ /dev/null @@ -1,7 +0,0 @@ -#!/usr/bin/with-contenv bash -set -e - -mkdir -p /data/logs -echo "Changing ownership of /data/logs to $(id -u):$(id -g)" -chown -R "$(id -u):$(id -g)" /data/logs - diff --git a/docker/rootfs/etc/cont-init.d/02_perms.sh b/docker/rootfs/etc/cont-init.d/02_perms.sh new file mode 100644 index 00000000..ca4b52b2 --- /dev/null +++ b/docker/rootfs/etc/cont-init.d/02_perms.sh @@ -0,0 +1,25 @@ +#!/usr/bin/with-contenv bash +set -e + +PUID=${PUID:-911} +PGID=${PGID:-911} + +groupmod -o -g "$PGID" abc +usermod -o -u "$PUID" abc + +echo ' +------------------------------------- +GID/UID +-------------------------------------' +echo " +User uid: $(id -u abc) +User gid: $(id -g abc) +------------------------------------- +" + +mkdir -p /data/logs +echo "Changing ownership of /data to abc:abc" +chown -R abc:abc /data + +echo "Changing ownership of /etc/letsencrypt to abc:abc" +chown -R abc:abc /etc/letsencrypt diff --git a/docker/rootfs/etc/logrotate.d/nginx-proxy-manager b/docker/rootfs/etc/logrotate.d/nginx-proxy-manager index 20c23ac6..9183fc4f 100644 --- a/docker/rootfs/etc/logrotate.d/nginx-proxy-manager +++ b/docker/rootfs/etc/logrotate.d/nginx-proxy-manager @@ -1,5 +1,6 @@ /data/logs/*_access.log /data/logs/*/access.log { - create 0644 root root + su root root + create 0644 abc abc weekly rotate 4 missingok @@ -12,7 +13,8 @@ } /data/logs/*_error.log /data/logs/*/error.log { - create 0644 root root + su root root + create 0644 abc abc weekly rotate 10 missingok