6 changed files with 183 additions and 9 deletions
@ -0,0 +1,111 @@ |
|||||
|
FROM alpine:3.10 |
||||
|
|
||||
|
LABEL maintainer="NGINX Docker Maintainers <docker-maint@nginx.com>" |
||||
|
|
||||
|
ENV NGINX_VERSION 1.17.9 |
||||
|
ENV NJS_VERSION 0.3.9 |
||||
|
ENV PKG_RELEASE 1 |
||||
|
|
||||
|
RUN set -x \ |
||||
|
# create nginx user/group first, to be consistent throughout docker variants |
||||
|
&& addgroup -g 101 -S nginx \ |
||||
|
&& adduser -S -D -H -u 101 -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx \ |
||||
|
&& apkArch="$(cat /etc/apk/arch)" \ |
||||
|
&& nginxPackages=" \ |
||||
|
nginx=${NGINX_VERSION}-r${PKG_RELEASE} \ |
||||
|
nginx-module-xslt=${NGINX_VERSION}-r${PKG_RELEASE} \ |
||||
|
nginx-module-geoip=${NGINX_VERSION}-r${PKG_RELEASE} \ |
||||
|
nginx-module-image-filter=${NGINX_VERSION}-r${PKG_RELEASE} \ |
||||
|
nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${PKG_RELEASE} \ |
||||
|
" \ |
||||
|
&& case "$apkArch" in \ |
||||
|
x86_64) \ |
||||
|
# arches officially built by upstream |
||||
|
set -x \ |
||||
|
&& KEY_SHA512="e7fa8303923d9b95db37a77ad46c68fd4755ff935d0a534d26eba83de193c76166c68bfe7f65471bf8881004ef4aa6df3e34689c305662750c0172fca5d8552a *stdin" \ |
||||
|
&& apk add --no-cache --virtual .cert-deps \ |
||||
|
openssl \ |
||||
|
&& wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub \ |
||||
|
&& if [ "$(openssl rsa -pubin -in /tmp/nginx_signing.rsa.pub -text -noout | openssl sha512 -r)" = "$KEY_SHA512" ]; then \ |
||||
|
echo "key verification succeeded!"; \ |
||||
|
mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; \ |
||||
|
else \ |
||||
|
echo "key verification failed!"; \ |
||||
|
exit 1; \ |
||||
|
fi \ |
||||
|
&& apk del .cert-deps \ |
||||
|
&& apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages \ |
||||
|
;; \ |
||||
|
*) \ |
||||
|
# we're on an architecture upstream doesn't officially build for |
||||
|
# let's build binaries from the published packaging sources |
||||
|
set -x \ |
||||
|
&& tempDir="$(mktemp -d)" \ |
||||
|
&& chown nobody:nobody $tempDir \ |
||||
|
&& apk add --no-cache --virtual .build-deps \ |
||||
|
gcc \ |
||||
|
libc-dev \ |
||||
|
make \ |
||||
|
openssl-dev \ |
||||
|
pcre-dev \ |
||||
|
zlib-dev \ |
||||
|
linux-headers \ |
||||
|
libxslt-dev \ |
||||
|
gd-dev \ |
||||
|
geoip-dev \ |
||||
|
perl-dev \ |
||||
|
libedit-dev \ |
||||
|
mercurial \ |
||||
|
bash \ |
||||
|
alpine-sdk \ |
||||
|
findutils \ |
||||
|
&& su nobody -s /bin/sh -c " \ |
||||
|
export HOME=${tempDir} \ |
||||
|
&& cd ${tempDir} \ |
||||
|
&& hg clone https://hg.nginx.org/pkg-oss \ |
||||
|
&& cd pkg-oss \ |
||||
|
&& hg up ${NGINX_VERSION}-${PKG_RELEASE} \ |
||||
|
&& cd alpine \ |
||||
|
&& make all \ |
||||
|
&& apk index -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk \ |
||||
|
&& abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz \ |
||||
|
" \ |
||||
|
&& cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ \ |
||||
|
&& apk del .build-deps \ |
||||
|
&& apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages \ |
||||
|
;; \ |
||||
|
esac \ |
||||
|
# if we have leftovers from building, let's purge them (including extra, unnecessary build deps) |
||||
|
&& if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi \ |
||||
|
&& if [ -n "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi \ |
||||
|
&& if [ -n "/etc/apk/keys/nginx_signing.rsa.pub" ]; then rm -f /etc/apk/keys/nginx_signing.rsa.pub; fi \ |
||||
|
# Bring in gettext so we can get `envsubst`, then throw |
||||
|
# the rest away. To do this, we need to install `gettext` |
||||
|
# then move `envsubst` out of the way so `gettext` can |
||||
|
# be deleted completely, then move `envsubst` back. |
||||
|
&& apk add --no-cache --virtual .gettext gettext \ |
||||
|
&& mv /usr/bin/envsubst /tmp/ \ |
||||
|
\ |
||||
|
&& runDeps="$( \ |
||||
|
scanelf --needed --nobanner /tmp/envsubst \ |
||||
|
| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \ |
||||
|
| sort -u \ |
||||
|
| xargs -r apk info --installed \ |
||||
|
| sort -u \ |
||||
|
)" \ |
||||
|
&& apk add --no-cache $runDeps \ |
||||
|
&& apk del .gettext \ |
||||
|
&& mv /tmp/envsubst /usr/local/bin/ \ |
||||
|
# Bring in tzdata so users could set the timezones through the environment |
||||
|
# variables |
||||
|
&& apk add --no-cache tzdata \ |
||||
|
# forward request and error logs to docker log collector |
||||
|
&& ln -sf /dev/stdout /var/log/nginx/access.log \ |
||||
|
&& ln -sf /dev/stderr /var/log/nginx/error.log |
||||
|
|
||||
|
COPY default.conf /etc/nginx/conf.d/ |
||||
|
EXPOSE 8000 |
||||
|
|
||||
|
STOPSIGNAL SIGTERM |
||||
|
|
||||
|
CMD ["nginx", "-g", "daemon off;"] |
||||
@ -0,0 +1,45 @@ |
|||||
|
server { |
||||
|
listen 8000; |
||||
|
server_name localhost; |
||||
|
|
||||
|
#charset koi8-r; |
||||
|
#access_log /var/log/nginx/host.access.log main; |
||||
|
|
||||
|
location / { |
||||
|
root /usr/share/nginx/html; |
||||
|
index index.html index.htm; |
||||
|
} |
||||
|
|
||||
|
#error_page 404 /404.html; |
||||
|
|
||||
|
# redirect server error pages to the static page /50x.html |
||||
|
# |
||||
|
error_page 500 502 503 504 /50x.html; |
||||
|
location = /50x.html { |
||||
|
root /usr/share/nginx/html; |
||||
|
} |
||||
|
|
||||
|
# proxy the PHP scripts to Apache listening on 127.0.0.1:80 |
||||
|
# |
||||
|
#location ~ \.php$ { |
||||
|
# proxy_pass http://127.0.0.1; |
||||
|
#} |
||||
|
|
||||
|
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 |
||||
|
# |
||||
|
#location ~ \.php$ { |
||||
|
# root html; |
||||
|
# fastcgi_pass 127.0.0.1:9000; |
||||
|
# fastcgi_index index.php; |
||||
|
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; |
||||
|
# include fastcgi_params; |
||||
|
#} |
||||
|
|
||||
|
# deny access to .htaccess files, if Apache's document root |
||||
|
# concurs with nginx's one |
||||
|
# |
||||
|
#location ~ /\.ht { |
||||
|
# deny all; |
||||
|
#} |
||||
|
} |
||||
|
|
||||
@ -0,0 +1,4 @@ |
|||||
|
VIRTUAL_HOST=guide.apella.tk |
||||
|
VIRTUAL_PORT=8000 |
||||
|
LETSENCRYPT_HOST=guide.apella.tk |
||||
|
LETSENCRYPT_EMAIL=apotwohd@gmail.com |
||||
@ -0,0 +1,10 @@ |
|||||
|
build: |
||||
|
@docker-compose -p apella-guide build; |
||||
|
run: |
||||
|
@docker-compose -p apella-guide up -d |
||||
|
stop: |
||||
|
@docker-compose -p apella-guide down |
||||
|
clean-data: |
||||
|
@docker-compose -p apella-guide down -v |
||||
|
clean-images: |
||||
|
@docker rmi `docker images -q -f "dangling=true"` |
||||
Loading…
Reference in new issue