Update Dockerfile

Dockerfile

@@ -19,33 +19,33 @@ RUN git clone --depth 1 --branch "${OPENCLAW_REF}" "${OPENCLAW_REPO}" . && \
     pnpm build && \
     pnpm ui:build
 
-# 最终运行阶段
+# 最终运行阶段（权限优化版）
 FROM node:22-bookworm
 
 USER root
 
+# 安装 nginx 并创建所有必要目录 + 统一权限设置（合并到一个 RUN，减少层数）
 RUN apt-get update && \
     apt-get install -y --no-install-recommends nginx && \
-    apt-get clean && rm -rf /var/lib/apt/lists/*
-
-# 创建 nginx 所需目录并设置权限
-RUN mkdir -p /var/lib/nginx/body /var/lib/nginx/tmp /var/log/nginx && \
-    chown -R node:node /var/lib/nginx /var/log/nginx
+    apt-get clean && rm -rf /var/lib/apt/lists/* && \
+    mkdir -p /var/lib/nginx/body /var/lib/nginx/tmp /var/log/nginx /home/user /app && \
+    chown -R node:node /var/lib/nginx /var/log/nginx /home/user /app
 
+# 清理默认 nginx 配置
 RUN rm -f /etc/nginx/sites-enabled/default \
     && rm -f /etc/nginx/conf.d/default.conf
 
+# 复制配置文件
 COPY nginx.conf /etc/nginx/conf.d/openclaw.conf
 COPY setup-hf-config.mjs /app/setup-hf-config.mjs
 COPY start.sh /start.sh
+
 RUN chmod +x /start.sh
 
-# 使用环境变量传递 Token
+# 环境变量
 ENV OPENCLAW_TOKEN=Li8900
 
-# 权限设置
-RUN chown -R node:node /app /home/user
-
+# 切换到普通用户
 USER node
 
 EXPOSE 7860