security hardening, team invites, granular locking, view counts, board subscriptions, scheduled changelog, mentions, recovery codes, accessibility and hover states

Dockerfile

@@ -30,7 +30,12 @@ COPY --from=builder /app/packages/web/dist packages/web/dist/
 COPY --from=builder /app/node_modules node_modules/
 COPY --from=builder /app/echoboard.plugins.ts ./
 
+RUN addgroup -g 1001 echoboard && adduser -u 1001 -G echoboard -D echoboard && \
+    mkdir -p /app/packages/api/uploads && chown -R echoboard:echoboard /app
+
 ENV NODE_ENV=production
 EXPOSE 3000
 
+USER echoboard
+
 CMD ["sh", "-c", "npx prisma migrate deploy --schema=packages/api/prisma/schema.prisma && node packages/api/dist/index.js"]