security: utente non-root (appuser, uid 10001) nel Dockerfile del gateway

- verificato sul server: whoami=appuser, status OK, scrittura OK (istanza di test)
2026-08-16 19:14:54 +02:00
parent 625e569389
commit 25ccb13f5b
1 changed files with 4 additions and 0 deletions
@@ -6,5 +6,9 @@ RUN pip install --no-cache-dir -r requirements.txt

 COPY main.py .

+# Utente non-root con privilegi minimi (best practice container)
+RUN useradd --create-home --uid 10001 appuser
+USER appuser
+
 EXPOSE 8080
 CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8080"]