fix: base distroless sans nonroot pour port 80

Dockerfile

@@ -6,12 +6,12 @@ COPY . .
 
 RUN CGO_ENABLED=0 go build -o /server
 
-FROM gcr.io/distroless/static:nonroot
+FROM gcr.io/distroless/static
 
 WORKDIR /
 
 COPY --from=builder /server /
-COPY --from=builder /app/oidc-provider/web /oidc-provider/web
+COPY --from=builder /app/oidc-provider/web /web
 
 EXPOSE 8080
 EXPOSE 80

oidc-provider/oidc-provider.go

@@ -124,11 +124,9 @@ func createNamespaceDexServer(handler *handlers.MobilityAccountsHandler, stor st
 
 	// Determine web config
 	webCfg := server.WebConfig{
+		Dir:    "/web",
 		Issuer: nsName,
 	}
-	if nsCfg.TemplatesDir != "" {
-		webCfg.Dir = nsCfg.TemplatesDir
-	}
 
 	// Dex v2.42 manages signing keys internally via storage.
 	dexServer, err := server.NewServer(ctx, server.Config{