Commit Graph

6 Commits

Author SHA1 Message Date
Hugh Brown
ebe148e537 fix: use Alpine-compatible flags for addgroup/adduser in frontend Dockerfile
node:20-alpine uses BusyBox which does not support GNU-style
--system/--ingroup flags. Switch to -S/-G equivalents.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:35:10 +05:30
Hugh Brown
c7f8578f38 security: run Docker containers as non-root user
Both backend and frontend Dockerfiles ran all processes as root.
Add a dedicated appuser in each runtime stage so container processes
run with minimal privileges, limiting blast radius of any container
escape.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:35:10 +05:30
Abhimanyu Saharan
0fe61e3e08 refactor(env): update NEXT_PUBLIC_API_URL to use 'auto' for better flexibility 2026-03-03 02:40:28 +05:30
Abhimanyu Saharan
06ff1a9720 feat: implement local authentication mode and update related components 2026-02-11 19:40:33 +05:30
Arjun (OpenClaw)
c65b225ba7 fix: dockerfiles build in compose context
- backend: copy dependency lockfiles from backend/ when build context is repo root
- frontend: don't copy public/ when it doesn't exist
2026-02-07 15:57:25 +00:00
Ishaan (OpenClaw)
8c0e9b1931 Add Dockerfiles and compose quickstart 2026-02-06 23:33:25 +00:00