Don't run girder as root

whole-tale · Dec 11, 2018 · df4cde1 · df4cde1
1 parent 86b4a0f
commit df4cde1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/stacks/core/swarm-compose.tpl b/stacks/core/swarm-compose.tpl
@@ -89,6 +89,8 @@ services:
       - mongo
     environment:
       - DASHBOARD_URL=https://dashboard.${subdomain}.${domain}
+      - GOSU_USER=girder:girder
+      - "GOSU_CHOWN=/tmp/wt-home-dirs /tmp/wt-tale-dirs /tmp/ps"
     volumes:
       - "/mnt/homes:/tmp/wt-home-dirs"
       - "/mnt/homes:/tmp/wt-tale-dirs"