Skip to content

Remove folder-open dropper and run nginx as non-root on 8080 - #1

Merged
kleosr merged 1 commit into
mainfrom
security/defensive-hardening
Aug 24, 2026
Merged

Remove folder-open dropper and run nginx as non-root on 8080#1
kleosr merged 1 commit into
mainfrom
security/defensive-hardening

Conversation

@kleosr

@kleosr kleosr commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Delete fake font launcher and disable automatic tasks on folder open.
  • Container now uses USER nginx and listens on 8080 (host must map 80 to 8080).

Test plan

  • Open the folder and confirm no font/Node task auto-runs.
  • Rebuild the image and confirm it listens on 8080 as nginx.
  • Update Coolify/host mapping: host 80 → container 8080.

Made with Cursor

…er on 8080.

Co-authored-by: Cursor <cursoragent@cursor.com>
@kleosr
kleosr merged commit d82a2b8 into main Aug 24, 2026
@kleosr
kleosr deleted the security/defensive-hardening branch August 24, 2026 02:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant