second

Dockerfile

@@ -1,10 +1,9 @@
 FROM node:22-slim
 
-# Installer codex én gang ved build
+RUN useradd -ms /bin/bash dev
 RUN npm install -g @openai/codex
 
-# Sett workspace
+USER dev
 WORKDIR /workspace
 
-# Default shell
 CMD ["bash"]

docker-compose.yaml

@@ -10,6 +10,20 @@ services:
       - ./workspace:/workspace
       - codex_config:/root/.config
 
+    environment:
+      - HOME=/home/dev
+
+    tmpfs:
+      - /tmp
+
+    cap_drop:
+      - ALL
+
+    security_opt:
+      - no-new-privileges:true
+
+    network_mode: bridge
+
     command: sleep infinity
 
 volumes: