Merge pull request #27 from microservices-demo/security/user

Add user to dockerfile. Added new requirement in package.json

Author: vlal

Dockerfile

@@ -2,8 +2,8 @@ FROM mhart/alpine-node:6.3
 ENV NODE_ENV "production"
 ENV PORT 8079
 EXPOSE 8079
-
-RUN mkdir -p /usr/src/app
+RUN addgroup mygroup && adduser -D -G mygroup myuser && mkdir -p /usr/src/app && chown -R myuser /usr/src/app
+USER myuser
 
 # Prepare app directory
 WORKDIR /usr/src/app

package.json

@@ -26,6 +26,7 @@
     "request": "^2.72.0",
     "serve-static": "^1.10.2",
     "epimetheus": "^1.0.46",
+    "prom-client": "^6.1.0",
     "morgan": "^1.7.0"
   },
   "devDependencies": {