From 49836aeb6f1f65061cbfc831496027fb8eb2479d Mon Sep 17 00:00:00 2001
From: Twig6943 <119701717+Twig6943@users.noreply.github.com>
Date: Fri, 27 Mar 2026 09:59:46 +0300
Subject: [PATCH] Update Dockerfile

---
 docker/dedicated-server/Dockerfile | 22 +++++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/docker/dedicated-server/Dockerfile b/docker/dedicated-server/Dockerfile
index 7a82d34a8..301ab0da3 100644
--- a/docker/dedicated-server/Dockerfile
+++ b/docker/dedicated-server/Dockerfile
@@ -4,6 +4,11 @@ ARG DEBIAN_FRONTEND=noninteractive
 # basically, it only works with a Release build.(libs are not included in Debug build)
 ARG MC_RUNTIME_DIR=srv/mc
 
+ENV PROTONPATH=GE-Proton
+ENV PROTON_ENABLE_WAYLAND=1
+ENV WINEARCH=win64
+ENV WINEPREFIX=/var/opt/wineprefix64
+
 RUN dpkg --add-architecture i386 \
     && apt-get update \
     && apt-get install -y --no-install-recommends \
@@ -37,12 +42,17 @@ RUN set -eux; \
     apt-get install -y /tmp/umu-launcher.deb; \
     rm -f /tmp/umu-launcher.deb;
 
-ENV PROTONPATH=GE-Proton
-ENV PROTON_ENABLE_WAYLAND=1
-ENV WINEARCH=win64
-ENV WINEPREFIX=/var/opt/wineprefix64
+# Create user
+RUN useradd -m -s /bin/bash mclce
 
-WORKDIR /srv/mc
+# Give maxima sudo without password
+RUN echo "maxima ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/mclce \
+ && chmod 0440 /etc/sudoers.d/mclce
+
+USER mclce
+
+# games dir
+RUN sudo chmod 0755 /srv/mc
 
 # latest server build
 RUN curl -Lo /tmp/LCEServerWindows64.zip \
@@ -56,4 +66,6 @@ RUN chmod 0755 /usr/local/bin/entrypoint.sh \
     && mkdir -p /var/opt/wineprefix64 /srv/mc \
     && test -f /srv/mc/Minecraft.Server.exe
 
+WORKDIR /srv/mc
+
 ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/entrypoint.sh"]