From c86cc6ad4054e0c2ee00c7f568fbdca4b1738eea Mon Sep 17 00:00:00 2001 From: tiago <70700766+tiagozip@users.noreply.github.com> Date: Sat, 10 Jan 2026 16:26:36 +0000 Subject: [PATCH] fix: standalone: fix #141 --- SECURITY.MD | 6 +----- docs/guide/standalone/index.md | 4 ++-- standalone/Dockerfile | 4 ++-- standalone/package.json | 2 +- 4 files changed, 6 insertions(+), 10 deletions(-) diff --git a/SECURITY.MD b/SECURITY.MD index 1b45233..1302a80 100644 --- a/SECURITY.MD +++ b/SECURITY.MD @@ -1,7 +1,3 @@ # Security policy -To report security vulnerabilities, please email me at [`hello@tiago.zip`](mailto:hello@tiago.zip). - -The latest version of all Cap packages is actively maintained and patched for all major and minor security vulnerabilities. - -For any other versions, I can only guarantee fixes of major security vulnerabilities. \ No newline at end of file +Please email me at [`hello@tiago.zip`](mailto:hello@tiago.zip) to report any security issues. diff --git a/docs/guide/standalone/index.md b/docs/guide/standalone/index.md index aa4adb7..61783bc 100644 --- a/docs/guide/standalone/index.md +++ b/docs/guide/standalone/index.md @@ -29,7 +29,7 @@ volumes: ::: tip Tips -* Make sure to add an admin key to log into the web UI. It should be at least 30 characters long. +* Make sure to add an admin key to log into the web UI. It should be at least 12 characters long. * If your port 3000 is already in use, feel free to change it to something else. @@ -108,4 +108,4 @@ A successful response will return: Cap Standalone can also serve the widget and floating client-side library files. [Learn more](options.md#asset-server) -::: \ No newline at end of file +::: diff --git a/standalone/Dockerfile b/standalone/Dockerfile index 1065954..aadf98d 100644 --- a/standalone/Dockerfile +++ b/standalone/Dockerfile @@ -1,4 +1,4 @@ -FROM oven/bun:1 AS base +FROM oven/bun:slim AS base WORKDIR /usr/src/app FROM base AS install @@ -21,7 +21,7 @@ COPY --from=prerelease /usr/src/app . WORKDIR /usr/src/app ENV DATA_PATH=/usr/src/app/.data -RUN mkdir -p ${DATA_PATH} && chown -R bun:bun ${DATA_PATH} +RUN mkdir -p ${DATA_PATH} && chown -R 1000:bun ${DATA_PATH} && chmod -R 770 ${DATA_PATH} EXPOSE 3000/tcp diff --git a/standalone/package.json b/standalone/package.json index 3ccb136..22cbbe1 100644 --- a/standalone/package.json +++ b/standalone/package.json @@ -1,6 +1,6 @@ { "name": "cap-standalone", - "version": "2.1.0", + "version": "2.1.1", "scripts": { "test": "echo \"Error: no test specified\" && exit 1", "dev": "bun run --watch src/index.js",