Security headers, cross-site write refusal, atomic JSON writes, admin backup download, /healthz and Docker health check, OnlyOffice requires a JWT secret, npm test, CI audit, arm64 hub image. New Links tab for personal bookmarks, saved with per-person settings. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
14 lines
386 B
Docker
14 lines
386 B
Docker
FROM node:22-alpine
|
|
WORKDIR /app
|
|
COPY package.json package-lock.json ./
|
|
RUN npm ci --omit=dev
|
|
COPY *.js ./
|
|
COPY public ./public
|
|
ENV PORT=8080 DATA_DIR=/data
|
|
RUN mkdir -p /data && chown node:node /data
|
|
VOLUME /data
|
|
EXPOSE 8080
|
|
USER node
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=15s CMD wget -qO- http://127.0.0.1:8080/healthz >/dev/null || exit 1
|
|
CMD ["node", "server.js"]
|