From cbba7de5b671b370b732076bfd963df58d675874 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tobias=20H=C3=BCske?= <t.hueske@mittwald.de>
Date: Wed, 26 Jun 2024 22:05:00 +0200
Subject: [PATCH] add non-root nginx

---
 conf/nginx/nginx.conf | 8 +++++++-
 docker-compose.yml    | 2 +-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/conf/nginx/nginx.conf b/conf/nginx/nginx.conf
index b9f6b08..0cbbeca 100644
--- a/conf/nginx/nginx.conf
+++ b/conf/nginx/nginx.conf
@@ -2,7 +2,7 @@ user  nginx;
 worker_processes auto;
 
 error_log  /var/log/nginx/error.log notice;
-pid        /var/run/nginx.pid;
+pid        /tmp/nginx.pid;
 
 
 events {
@@ -11,6 +11,12 @@ events {
 
 
 http {
+    proxy_temp_path /tmp/proxy_temp;
+    client_body_temp_path /tmp/client_temp;
+    fastcgi_temp_path /tmp/fastcgi_temp;
+    uwsgi_temp_path /tmp/uwsgi_temp;
+    scgi_temp_path /tmp/scgi_temp;
+
     include       /etc/nginx/mime.types;
     default_type  application/octet-stream;
 
diff --git a/docker-compose.yml b/docker-compose.yml
index c3ee9ee..1b82aa3 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -32,7 +32,7 @@ services:
       - db
 
   web:
-    image: nginx:stable-alpine
+    image: nginxinc/nginx-unprivilege:stable-alpine
     restart: unless-stopped
     environment:
       - TZ=Europe/Berlin