Chmod first

[GewoonJaap]

Fixes #14
This pull request updates the Dockerfile to streamline the setup and permissions of the start.sh startup script. The changes simplify the process by using Docker's built-in features for file permissions and remove redundant commands.

Improvements to Dockerfile setup and permissions:

• Replaced the manual chmod and chown commands for start.sh with a single COPY --chmod=755 instruction, ensuring the script has execute permissions immediately upon copying.
• Removed redundant COPY --chown and RUN chmod +x lines for start.sh, relying on the updated COPY command for both placement and permissions.

Entrypoint configuration:

• Clarified the use of the startup script by directly setting it as the Docker entrypoint, ensuring consistent container initialization.

[Copilot]

Pull Request Overview

This PR simplifies the Dockerfile by consolidating the setup of the start.sh startup script into a single COPY command with built-in permission settings, eliminating redundant operations.

Key changes:

• Consolidated script copying and permission setting into one COPY --chmod=755 instruction
• Removed duplicate COPY --chown and RUN chmod +x commands
• Moved the script setup earlier in the Dockerfile (before USER switch)

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Pull Request Overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

The script is copied with permissions 755 before switching to the non-root user. If the start.sh file contains sensitive information or credentials, this could allow other users on the system to read it. Consider using more restrictive permissions like 750 or 700 to limit access to the owner and group only.

Suggested change

	COPY --chmod=755 --chown=worker:nodejs start.sh /app/start.sh
	COPY --chmod=700 --chown=worker:nodejs start.sh /app/start.sh