Update django-allauth. Use non root users.

electionscience · Jan 22, 2025 · f3650e0 · f3650e0
1 parent 743ba4f
commit f3650e0
Show file tree

Hide file tree

Showing 3 changed files with 59 additions and 154 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -29,6 +29,14 @@ RUN poetry install --no-dev --no-root
 # Copy the rest of the project files into the working directory
 COPY . /code/
 
+# Create a non-root user and switch to it
+RUN addgroup --system appgroup && adduser --system --ingroup appgroup appuser
+USER appuser
+
+# Expose the port your app runs on
+EXPOSE 8000
+
+# Healthcheck for Fly.io
 HEALTHCHECK CMD curl --fail http://localhost:8000/ || exit 1
 
 # Use a script as the entrypoint

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -18,8 +18,7 @@ gunicorn = "^22.0.0"
 django-upgrade = "^1.15.0"
 whitenoise = "^6.6.0"
 django-structlog = "^7.1.0"
-django-passkeys = "^1.2.7"
-django-allauth = "^0.61.1"
+django-allauth = { version = "65.3.1", extras = ["socialaccount", "google"] }
 djlint = "^1.34.1"
 django-widget-tweaks = "^1.5.0"
 sentry-sdk = { extras = ["django"], version = "^2.8.0" }