dedicated user

Dockerfile

@@ -41,4 +41,7 @@ RUN \
     chmod -R 777 /var/lib/tt-rss/feed-icons && \
     chmod -R 777 /var/lib/tt-rss/lock
 
+RUN adduser -D ttrss
+USER ttrss
+
 CMD supervisord -c /var/lib/tt-rss-install/supervisor.conf

supervisor.conf

@@ -1,12 +1,10 @@
 [supervisord]
 nodaemon=true
-user=nginx
 logfile=/tmp/supervisord.log
 pidfile=/tmp/supervisord.pid
 
 [program:nginx]
 command=/usr/sbin/nginx -g "daemon off;"
-autostart=true
 autorestart=true
 stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
@@ -15,7 +13,6 @@ stderr_logfile_maxbytes=0
 
 [program:php-fpm]
 command=/usr/sbin/php-fpm7 -F
-autostart=true
 autorestart=true
 stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
@@ -25,7 +22,6 @@ stderr_logfile_maxbytes=0
 [eventlistener:feed-update]
 command=/usr/bin/php7 -r 'while (true) { print("READY\n"); readline(); passthru("/usr/bin/php7 /var/lib/tt-rss/update.php --daemon-loop"); print("RESULT 2\nOK\n"); }'
 events=TICK_60
-autostart=true
 autorestart=true
 stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
@@ -33,5 +29,5 @@ stderr_logfile=/dev/stderr
 stderr_logfile_maxbytes=0
 
 [eventlistener:quit_on_failure]
-events=PROCESS_STATE_FATAL
 command=/usr/bin/python /var/lib/tt-rss-install/manage-supervisord.py
+events=PROCESS_STATE_FATAL