odc_application_dockerfile

@@ -55,14 +55,19 @@ RUN echo "#!/bin/sh" > /docker-entrypoint-init.d/01-symfony.sh \
     && echo "php bin/console cache:clear" >> /docker-entrypoint-init.d/01-symfony.sh \
     && chmod +x /docker-entrypoint-init.d/01-symfony.sh
 
-USER nobody
-
 RUN wget https://github.com/H2-invent/open-datenschutzcenter/releases/download/${VERSION}/application.zip -O artifact.zip \
     && unzip artifact.zip \
-    && mkdir data
+    && chown -R nobody public \
+    && chown -R nobody var \
+    && chmod -R 700 public \
+    && chmod -R 700 var
 
-RUN rm artifact.zip \
-    && rm -r var/cache
+RUN apk del unzip \
+    && rm artifact.zip \
+    && rm -r var/cache \
+    && rm -rf /var/cache/apk/*
+
+USER nobody
 
 ENV nginx_root_directory=/var/www/html/public \
     upload_max_filesize=10M \