12 Releases 12 Tags

RSS Feed

• 0.2.2 1cea82f5d9

  Compare

  NexaPG 0.2.2 - NGINX unprivileged security update Stable

  nessi released this 2026-02-14 16:20:45 +00:00 | 5 commits to main since this release

  Changed

  Frontend Runtime Security Hardening

  • Switched frontend runtime image to an unprivileged NGINX variant:
    • from nginx:1.29-alpine-slim
    • to nginxinc/nginx-unprivileged:stable-alpine
  • Set explicit non-root runtime user in frontend container:
    • USER 101

  Frontend Runtime Port Alignment

  • Updated NGINX listener in frontend runtime config:
    • listen 8080;
  • Updated frontend container port exposure:
    • EXPOSE 8080
  • Updated Docker Compose frontend mapping:
    • from ${FRONTEND_PORT}:80
    • to ${FRONTEND_PORT}:8080

  Why This Release

  • Improves container runtime security posture by running frontend as non-root by default.
  • Aligns deployment with Docker Scout best-practice checks (default non-root user).
  • Keeps external access unchanged (still via FRONTEND_PORT on host), while hardening internal container behavior.

  Notes

  • No database migration required.
  • Rebuild and republish frontend image, then redeploy to apply changes.
  • If using custom reverse-proxy/container configs, ensure upstream points to frontend container port 8080.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)