fix!: create /app/data dir and give appuser permissions (#14)

Co-authored-by: Vladyslav Pasichniuk <vladyslav_pasichniuk@epam.com>

Author: Pasichniuk

Dockerfile

@@ -17,7 +17,8 @@ FROM eclipse-temurin:17-jre-alpine AS runtime
 WORKDIR /app
 
 RUN adduser -u 1001 --disabled-password --gecos "" appuser && \
-    chown appuser:appuser /app
+    mkdir -p /app/data && \
+    chown -R appuser:appuser /app
 
 COPY --from=builder --chown=appuser:appuser /build-workspace/build/libs/ai-dial-admin-backend*.jar ./app.jar
 

docs/configuration.md

@@ -150,7 +150,7 @@ config.export.keyvault.type=vault
 | datasource.vendor              | DATASOURCE_VENDOR                 | H2                                                  | Datasource vendor: <ul><li>H2</li><li>POSTGRES</li><li>MS_SQL_SERVER</li></ul>                                                                         |
 | datasource.auth.type           | DATASOURCE_AUTH_TYPE              | basic                                               | Datasource auth type: <ul><li>basic (username and password)</li><li>azure (see [Azure Configuration](#azure-configuration): azure.auth.type)</li></ul> |
 | h2.datasource.url              | H2_DATASOURCE_URL                 | -                                                   | JDBC URL for H2 database connection                                                                                                                    |
-|                                | H2_FILE                           | ./testdb                                            | H2 database file                                                                                                                                       |
+|                                | H2_FILE                           | ./data/testdb                                       | H2 database file                                                                                                                                       |
 |                                | H2_OPS                            | CIPHER=AES;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE | H2 database connection options                                                                                                                         |
 | h2.datasource.masterKey        | H2_DATASOURCE_MASTERKEY           | -                                                   | Master key for H2 database encryption                                                                                                                  |
 | h2.datasource.encryptedFileKey | H2_DATASOURCE_ENCRYPTEDFILEKEY    | -                                                   | Encrypted file key for H2 database                                                                                                                     |

local_env/docker-compose.yml

@@ -17,6 +17,7 @@ services:
       METRICS_STORAGE_TOKEN: "myadmintoken"
       CORE_CLIENT_URL: "http://core:8080"
       DISABLE_SWAGGER_AUTHORIZATION: true
+      H2_FILE: ./data/testdb
       H2_DATASOURCE_MASTER_KEY: t8+npcgNMiipR+kHMb8zXAjgA3IedCXC
       H2_DATASOURCE_ENCRYPTED_FILE_KEY: 9vW1l/Eg+1J3YXpCsyR6AUI4ptMtI6pjkktePuUQts+wKVAauoP5CG21z5WTzp91xBcEww==
       H2_DATASOURCE_PASSWORD: password

src/main/resources/application.properties

@@ -94,7 +94,7 @@ management.server.port=9464
 datasource.vendor=${DATASOURCE_VENDOR:H2}
 datasource.auth.type=${DATASOURCE_AUTH_TYPE:basic}
 
-h2.datasource.url=jdbc:h2:file:${H2_FILE:./testdb};${H2_OPS:CIPHER=AES;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE}
+h2.datasource.url=jdbc:h2:file:${H2_FILE:./data/testdb};${H2_OPS:CIPHER=AES;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE}
 h2.datasource.driver-class-name=org.h2.Driver
 h2.datasource.username=sa
 h2.datasource.masterKey=${H2_DATASOURCE_MASTER_KEY}