From a47c55418979c3d07c25cadc9b151fd610b79ade Mon Sep 17 00:00:00 2001
From: "Aldo \"xoen\" Giambelluca" <aldo.giambelluca@digital.justice.gov.uk>
Date: Fri, 31 May 2019 15:23:40 +0100
Subject: [PATCH] Run nginx as non-root

Base image is now https://hub.docker.com/r/nginxinc/nginx-unprivileged

Image doesn't have the "official" tag on DockerHub but it's "owned and
maintained by NGINX"

> this image is as "official" as an image without the official images
> tag can be. It's not hosted on the official Docker images library,
> true, but it is owned and maintained by NGINX on both GitHub and
> Docker Hub.

See: https://github.com/nginxinc/docker-nginx-unprivileged/issues/19#issuecomment-479536708

Part of ticket: https://trello.com/c/x7zhOJ4N/223-run-webapp-as-non-root-not-on-port-80
---
 Dockerfile  | 4 ++--
 deploy.json | 3 ++-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a79bae8..a03064f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM nginx:stable-alpine
+FROM nginxinc/nginx-unprivileged:stable-alpine
 COPY www /usr/share/nginx/html
 
-EXPOSE 80
+EXPOSE 8080
diff --git a/deploy.json b/deploy.json
index 025d2ac..f1f4fe5 100644
--- a/deploy.json
+++ b/deploy.json
@@ -3,5 +3,6 @@
     "disable_authentication": false,
     "allowed_ip_ranges": [
       "DOM1"
-    ]
+    ],
+    "port": 8080
   }