-BREAKING- Update base image to not run as root

alpine/Dockerfile

@@ -11,9 +11,10 @@ RUN set -ex; \
 	wget --quiet -O /usr/local/bin/traefik "https://github.com/containous/traefik/releases/download/v1.7.5/traefik_linux-$arch"; \
 	chmod +x /usr/local/bin/traefik
 COPY entrypoint.sh /
-EXPOSE 80
+EXPOSE 8080
 ENTRYPOINT ["/entrypoint.sh"]
 CMD ["traefik"]
+USER 1001:1001
 
 # Metadata
 LABEL org.label-schema.vendor="Containous" \

alpine/entrypoint.sh

@@ -1,6 +1,9 @@
 #!/bin/sh
 set -e
 
+# Default to a higher port. Can be overridden by specifying the --entrypoints="Name:http Address::<PORT>" again.
+set -- --entrypoints="Name:http Address::8080" "$@"
+
 # first arg is `-f` or `--some-option`
 if [ "${1#-}" != "$1" ]; then
     set -- traefik "$@"

alpine/tmpl.Dockerfile

@@ -11,9 +11,10 @@ RUN set -ex; \
 	wget --quiet -O /usr/local/bin/traefik "https://github.com/containous/traefik/releases/download/$VERSION/traefik_linux-${DOLLAR}arch"; \
 	chmod +x /usr/local/bin/traefik
 COPY entrypoint.sh /
-EXPOSE 80
+EXPOSE 8080
 ENTRYPOINT ["/entrypoint.sh"]
 CMD ["traefik"]
+USER 1001:1001
 
 # Metadata
 LABEL org.label-schema.vendor="Containous" \

scratch/amd64/Dockerfile

@@ -1,9 +1,10 @@
 FROM scratch
 COPY certs/ca-certificates.crt /etc/ssl/certs/
 COPY traefik /
-EXPOSE 80
+EXPOSE 8080
 VOLUME ["/tmp"]
 ENTRYPOINT ["/traefik"]
+CMD ["--entrypoints=Name:http Address::8080"]
 
 # Metadata
 LABEL org.label-schema.vendor="Containous" \

scratch/arm/Dockerfile

@@ -1,9 +1,10 @@
 FROM scratch
 COPY certs/ca-certificates.crt /etc/ssl/certs/
 COPY traefik /
-EXPOSE 80
+EXPOSE 8080
 VOLUME ["/tmp"]
 ENTRYPOINT ["/traefik"]
+CMD ["--entrypoints=Name:http Address::8080"]
 
 # Metadata
 LABEL org.label-schema.vendor="Containous" \

scratch/arm64/Dockerfile

@@ -1,9 +1,10 @@
 FROM scratch
 COPY certs/ca-certificates.crt /etc/ssl/certs/
 COPY traefik /
-EXPOSE 80
+EXPOSE 8080
 VOLUME ["/tmp"]
 ENTRYPOINT ["/traefik"]
+CMD ["--entrypoints=Name:http Address::8080"]
 
 # Metadata
 LABEL org.label-schema.vendor="Containous" \

scratch/tmpl.Dockerfile

@@ -1,9 +1,10 @@
 FROM scratch
 COPY certs/ca-certificates.crt /etc/ssl/certs/
 COPY traefik /
-EXPOSE 80
+EXPOSE 8080
 VOLUME ["/tmp"]
 ENTRYPOINT ["/traefik"]
+CMD ["--entrypoints=Name:http Address::8080"]
 
 # Metadata
 LABEL org.label-schema.vendor="Containous" \