fix: standalone: fix #141

SECURITY.MD

@@ -1,7 +1,3 @@
 # Security policy
 
-To report security vulnerabilities, please email me at [`hello@tiago.zip`](mailto:hello@tiago.zip).
-
-The latest version of all Cap packages is actively maintained and patched for all major and minor security vulnerabilities.
-
-For any other versions, I can only guarantee fixes of major security vulnerabilities.
+Please email me at [`hello@tiago.zip`](mailto:hello@tiago.zip) to report any security issues.

docs/guide/standalone/index.md

@@ -29,7 +29,7 @@ volumes:
 
 ::: tip Tips
 
-* Make sure to add an admin key to log into the web UI. It should be at least 30 characters long.
+* Make sure to add an admin key to log into the web UI. It should be at least 12 characters long.
 
 * If your port 3000 is already in use, feel free to change it to something else.
 
@@ -108,4 +108,4 @@ A successful response will return:
 
 Cap Standalone can also serve the widget and floating client-side library files. [Learn more](options.md#asset-server)
 
-:::
+:::

standalone/Dockerfile

@@ -1,4 +1,4 @@
-FROM oven/bun:1 AS base
+FROM oven/bun:slim AS base
 WORKDIR /usr/src/app
 
 FROM base AS install
@@ -21,7 +21,7 @@ COPY --from=prerelease /usr/src/app .
 WORKDIR /usr/src/app
 
 ENV DATA_PATH=/usr/src/app/.data
-RUN mkdir -p ${DATA_PATH} && chown -R bun:bun ${DATA_PATH}
+RUN mkdir -p ${DATA_PATH} && chown -R 1000:bun ${DATA_PATH} && chmod -R 770 ${DATA_PATH}
 
 EXPOSE 3000/tcp
 

standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cap-standalone",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1",
     "dev": "bun run --watch src/index.js",