Fix proxy unpriviledged

docker-compose.yml

@@ -79,12 +79,13 @@ services:
     restart: always
     depends_on:
       - server-gunicorn
+    user: 101:999
     links:
       - db
     networks:
       - merginmaps
   proxy:
-    image: nginxinc/nginx-unprivileged:1.25.5
+    image: nginxinc/nginx-unprivileged:1.27
     container_name: merginmaps-proxy
     restart: always
     # run nginx as built-in user but with group mergin-family for files permissions

nginx.conf

@@ -17,7 +17,7 @@ server {
      # we don't want nginx trying to do something clever with
      # redirects, we set the Host: header above already.
      proxy_redirect off;
-     proxy_pass http://merginmaps-web;
+     proxy_pass http://merginmaps-web:8080;
    }
 
    # proxy to backend

web-app/Dockerfile

@@ -9,7 +9,7 @@ RUN yarn link:dependencies
 RUN yarn build:all
 RUN PUBLIC_PATH=/admin/ yarn build:all:admin
 
-FROM nginxinc/nginx-unprivileged:1.25.5
+FROM nginxinc/nginx-unprivileged:1.27
 MAINTAINER Martin Varga "martin.varga@lutraconsulting.co.uk"
 WORKDIR /usr/share/nginx/html
 # client app
@@ -18,4 +18,5 @@ COPY --from=builder /mergin/web-app/packages/app/dist ./app
 COPY --from=builder /mergin/web-app/packages/admin-app/dist ./admin
 # basic nginx config to serve static files
 COPY ./nginx.proxy.conf /etc/nginx/conf.d/default.conf
+EXPOSE 8080
 ENTRYPOINT ["nginx", "-g", "daemon off;"]

web-app/nginx.proxy.conf

@@ -1,5 +1,6 @@
 server {
-  listen 80;
+  listen 8080;
+  listen [::]:8080;
   client_max_body_size 4G;
 
   location / {