From c5f0364c39ae0c4e7876fca9ec6728c85ddbd80f Mon Sep 17 00:00:00 2001
From: Ein Anderssono <einand@3gdev.com>
Date: Wed, 14 Oct 2026 09:46:50 +0200
Subject: [PATCH] Bake frontend version before dropping privileges

---
 Dockerfile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index ae2ee7b..495a120 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,9 +1,11 @@
 FROM nginxinc/nginx-unprivileged:1.27-alpine
 
 ARG FRONTEND_VERSION
+USER root
 RUN test -n "$FRONTEND_VERSION" \
     && sed -i "s/__FRONTEND_VERSION__/${FRONTEND_VERSION}/g" /usr/share/nginx/html/index.html
 
 COPY nginx/default.conf /etc/nginx/conf.d/default.conf
 
+USER 101
 EXPOSE 8080