fix(secu): use non-root container (#254)

* Update Dockerfile

* Update config.json

.socialgouv/config.json

@@ -4,6 +4,7 @@
   "subdomain": "archifiltre",
   "project": "archifiltre",
   "registry": "ghcr",
+  "containerPort": 3000, 
   "ingress": {
     "annotations": {}
   }

Dockerfile

@@ -7,6 +7,10 @@ RUN apk add automake autoconf libtool dpkg pkgconfig nasm libpng libpng-dev g++
 RUN yarn --frozen-lockfile --prefer-offline && yarn cache clean
 RUN yarn build
 
-FROM ghcr.io/socialgouv/docker/nginx:6.53.2
+FROM ghcr.io/socialgouv/docker/nginx:6.65.0
 
-COPY --from=builder ./public /usr/share/nginx/html
+USER 101
+
+ENV PORT=3000
+
+COPY --from=builder --chown=nginx:nginx ./public /usr/share/nginx/html