mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-09-05 08:10:39 +00:00
d52e6829c2
Replace the docker/Dockerfile-based api+web compose setup with a single root Dockerfile that runs the fabro server with the embedded web UI on port 80, persists state under /storage, and drops to a non-root fabro user with CAP_NET_BIND_SERVICE. The release workflow stages the prebuilt Linux binaries from the compile job into a buildx context and publishes multi-arch images to ghcr.io/fabro-sh/fabro as :<version> (always), :latest (stable tags only), and :nightly (nightly tags only). Also address zizmor findings in nightly.yml (pinned create-github-app-token, persist-credentials: false with explicit remote URL setup) and release.yml (no-cache on tag-triggered setup-bun to close the cache-poisoning path). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2 lines
35 B
TOML
2 lines
35 B
TOML
[server.storage]
|
|
root = "/storage"
|