Rootless User konfigurierbar + Doku

docker-compose.yaml

@@ -1,6 +1,6 @@
 services:
   watcher:
-    image: git.triggermeelmo.com/watcher/watcher-server:${IMAGE_VERSION:-latest}
+    image: git.triggermeelmo.com/watcher/watcher-server:latest
     container_name: watcher
 
     # Resource Management
@@ -9,14 +9,11 @@ services:
         limits:
           memory: 200M
           cpus: '0.5'
-        reservations:
-          memory: 100M
-          cpus: '0.25'
 
     restart: unless-stopped
 
-    # Security
-    user: "1000:1000"
+    # Security - User/Group ID aus Umgebungsvariablen
+    user: "${USER_UID:-1000}:${USER_GID:-1000}"
 
     # Health Check
     healthcheck:
@@ -28,16 +25,13 @@ services:
 
     # Environment
     environment:
+      # Non-Root User
+      - USER_UID=1000 # Standard 1000
+      - USER_GID=1000 # Standard 1000
+
       # Timezone
       - TZ=Europe/Berlin
 
-      # Application Version (wird aus Image-Tag übernommen)
-      - WATCHER_VERSION=${IMAGE_VERSION:-latest}
-
-      # ASP.NET Core
-      - ASPNETCORE_ENVIRONMENT=Production
-      - ASPNETCORE_URLS=http://+:5000
-
       # Update Check
       - UPDATE_CHECK_ENABLED=true
       - UPDATE_CHECK_INTERVAL_HOURS=24