chore/security : fix Dockerfile vulnerabilities

Author: issam71100

web/lrm/client/Dockerfile

@@ -29,11 +29,21 @@ COPY --from=builder /app/.output ./.output
 COPY --from=builder /app/node_modules ./node_modules
 COPY --from=builder /app/public ./public
 
+# Create non-root user for security
+RUN addgroup -g 1001 -S app
+RUN adduser -S app -u 1001 -G app
+
+# Change ownership of the app directory to the non-root user
+RUN chown -R app:app /app
+
 ENV NUXT_HOST=0.0.0.0
 ENV NUXT_PORT=3000
 
 # Expose port 3000
 EXPOSE 3000
 
+# Switch to non-root user
+USER app
+
 # Start the web app
 CMD ["npm", "start"]

web/lrm/server/Dockerfile

@@ -31,12 +31,22 @@ RUN npm ci --omit=dev
 # Copy build directory from stage 1
 COPY --from=build /app/dist .
 
+# Create non-root user for security
+RUN addgroup -g 1001 -S app
+RUN adduser -S app -u 1001 -G app
+
+# Change ownership of the app directory to the non-root user
+RUN chown -R app:app /app
+
 # Setup ENV variable
 ENV NODE_ENV=production
 ENV PORT=80
 
 # Expose port 80 to allow incoming traffic
 EXPOSE 80
 
+# Switch to non-root user
+USER app
+
 # Start the Node web server
 CMD ["node", "index.js"]