From abd5b56c1d7d3d91dcc50d341198c3b829fd2718 Mon Sep 17 00:00:00 2001
From: El RIDO <elrido@gmx.net>
Date: Mon, 23 Sep 2019 07:52:34 +0200
Subject: [PATCH] reverting user to nobody, to avoid having to change
 permissions of existing data directories

---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 0c7afbe..02895c7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -49,7 +49,7 @@ RUN \
     && mkfifo /etc/services.d/php-fpm7/supervise/control \
     && mkfifo /etc/s6/services/s6-fdholderd/supervise/control \
     && setcap 'cap_net_bind_service=+ep' /usr/sbin/nginx \
-    && chown -R nginx.www-data /var/www /srv/* /etc/services.d /etc/s6 /run \
+    && chown -R nobody.www-data /var/lib/nginx /var/tmp/nginx /var/www /srv/* /etc/services.d /etc/s6 /run \
 # Clean up
     && rm -rf "${GNUPGHOME}" /tmp/* \
     && apk del gnupg curl libcap
@@ -57,7 +57,7 @@ RUN \
 COPY etc/ /etc/
 
 WORKDIR /var/www
-USER nginx:www-data
+USER nobody:www-data
 
 # mark dirs as volumes that need to be writable, allows running the container --read-only
 VOLUME /srv/data /tmp /var/tmp/nginx /run /var/log