knee-cola/evidencija-rezija
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: upgrade Node.js versions and improve Docker security

Browse Source 
- Upgrade email-worker from Node 18 to Node 20
- Update distroless images to nodejs20-debian12:nonroot for both services
- Improves security by running containers as nonroot user

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
Knee Cola
2026-01-07 21:12:20 +01:00
parent d2725261d5
commit ccc690c369
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
email-worker/Dockerfile
View File

@@ -1,7 +1,7 @@
#-------------------------------------------- #--------------------------------------------
# Stage: building TypeScript # Stage: building TypeScript
#-------------------------------------------- #--------------------------------------------
FROM node:18 as build-stage FROM node:20 as build-stage
ENV WORKDIR=/app ENV WORKDIR=/app
WORKDIR /app WORKDIR /app
@@ -30,7 +30,7 @@ RUN npm i --only=production && npm cache clean --force
#-------------------------------------------- #--------------------------------------------
# Stage: priprema finalnog image-a # Stage: priprema finalnog image-a
#-------------------------------------------- #--------------------------------------------
FROM gcr.io/distroless/nodejs:18 as assembly-stage FROM gcr.io/distroless/nodejs20-debian12:nonroot as assembly-stage
WORKDIR /app WORKDIR /app

2
mailgun-webhook/Dockerfile
View File

@@ -30,7 +30,7 @@ RUN npm i --omit=dev && npm cache clean --force
#-------------------------------------------- #--------------------------------------------
# Stage: preparing final image # Stage: preparing final image
#-------------------------------------------- #--------------------------------------------
FROM gcr.io/distroless/nodejs:20 AS assembly-stage FROM gcr.io/distroless/nodejs20-debian12:nonroot AS assembly-stage
WORKDIR /app WORKDIR /app