fix(docker): make containers rootless

closes #337

Author: jonerrr

backend/Dockerfile

@@ -12,6 +12,7 @@ RUN cargo build --release
 FROM ghcr.io/valhalla/valhalla:3.6.3@sha256:2b19ea46551a9687b245022551183829d817fdee9b58c5e7b2adb6e422749c43
 
 WORKDIR /app
-COPY --from=build /app/target/release/backend /backend
+COPY --chown=ubuntu:ubuntu --from=build /app/target/release/backend /backend
+USER ubuntu
 # EXPOSE 3055
 ENTRYPOINT [ "/backend" ]

demo.pod.yml

@@ -10,7 +10,7 @@ spec:
     - name: traefik
       image: traefik:v3
       args:
-        - --api.insecure=true
+        - --api.insecure=true # REMOVE IN PROD!!!!!!!!!!
         - --entrypoints.web.address=:80
         - --providers.file.filename=/etc/traefik/dynamic.yml
         - --providers.file.watch=true

frontend/Dockerfile

@@ -12,9 +12,10 @@ RUN pnpm prune --production
 FROM node:25-alpine@sha256:bdf2cca6fe3dabd014ea60163eca3f0f7015fbd5c7ee1b0e9ccb4ced6eb02ef4
 
 WORKDIR /app
-COPY --from=build /app/build build/
-COPY --from=build /app/node_modules node_modules/
-COPY package.json .
+COPY --chown=node:node --from=build /app/build build/
+COPY --chown=node:node --from=build /app/node_modules node_modules/
+COPY --chown=node:node package.json .
 # EXPOSE 3000
 ENV NODE_ENV=production
+USER node
 CMD ["node", "build"]