Reduce size of web service using nginx stable-alpine

[TDDR]

Issue This PR Addresses

Fixes #2835

Type of Change

There has been some discussion in the issue itself about how to tackle this. As requested by @humphd I have made a PR to get some help figuring this out.

Using USER nginx should work. What does it show when you do this? Can you put the whole Dockerfile up somewhere so I can test with you?

Yesterday when I was trying this, I was getting an error message saying something like the nginx user was not fond. Today, when I went to replicate the error I get this message now when I run a pnpm services:start

Switching into the web folder cd src/web and then running a docker build . produces a similar error

• Bugfix: Change which fixes an issue
• New Feature: Change which adds functionality
• Documentation Update: Change which improves documentation
• UI: Change which improves UI

Description

Steps to test the PR

• checkout the pr gh pr checkout 2944
• pnpm services:start
• the project should build without error

Checklist

• Quality: This PR builds and passes our npm test and works locally
• Tests: This PR includes thorough tests or an explanation of why it does not
• Screenshots: This PR includes screenshots or GIFs of the changes made or an explanation of why it does not (if applicable)
• Documentation: This PR includes updated/added documentation to user exposed functionality or configuration variables are added/changed or an explanation of why it does not(if applicable)

[gitpod-io]

[manekenpix]

I'm getting this at launch

nginx   | /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh
nginx   | /docker-entrypoint.sh: Configuration complete; ready for start up
nginx   | 2022/02/16 00:44:11 [warn] 1#1: the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /etc/nginx/nginx.conf:22
nginx   | nginx: [warn] the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /etc/nginx/nginx.conf:22
nginx   | 2022/02/16 00:44:11 [emerg] 1#1: mkdir() "/var/cache/nginx/client_temp" failed (13: Permission denied)
nginx   | nginx: [emerg] mkdir() "/var/cache/nginx/client_temp" failed (13: Permission denied)
nginx exited with code 1

[manekenpix]

I was able to run web removing the user in the Dockerfile (USER nginx) and removing this line. We'd also have to remove the same line in nginx.conf.development.template.
I tested it on staging and it seems to run with no issues.

[manekenpix]

Using USER nginx should work. What does it show when you do this? Can you put the whole Dockerfile up somewhere so I can test with you?

I did some testing and removing USER nginx from Dockerfile and adding user nginx; (instead of www-data) to nginx.template and nginx.conf.development.template (line 22) seems to work.

[humphd]

Let's switch the user we use in the two nginx.conf files like @manekenpix suggests.

[humphd]

This is great. Please file issues/PRs to do the same thing in other containers.