Apostolos Fanakis
5 years ago
4 changed files with 21 additions and 152 deletions
@ -1,111 +1,15 @@ |
|||||
FROM alpine:3.10 |
FROM alpine:3.10 as base |
||||
|
LABEL maintainer="Fanakis Apostolos <apotwohd@gmail.com>" |
||||
|
|
||||
LABEL maintainer="NGINX Docker Maintainers <docker-maint@nginx.com>" |
RUN apk add --update --no-cache openrc lighttpd \ |
||||
|
&& rm -rf /var/cache/apk/* |
||||
|
RUN rc-update add lighttpd default |
||||
|
|
||||
ENV NGINX_VERSION 1.17.9 |
FROM base as final |
||||
ENV NJS_VERSION 0.3.9 |
|
||||
ENV PKG_RELEASE 1 |
|
||||
|
|
||||
RUN set -x \ |
COPY lighttpd.conf /etc/lighttpd/lighttpd.conf |
||||
# create nginx user/group first, to be consistent throughout docker variants |
|
||||
&& addgroup -g 101 -S nginx \ |
|
||||
&& adduser -S -D -H -u 101 -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx \ |
|
||||
&& apkArch="$(cat /etc/apk/arch)" \ |
|
||||
&& nginxPackages=" \ |
|
||||
nginx=${NGINX_VERSION}-r${PKG_RELEASE} \ |
|
||||
nginx-module-xslt=${NGINX_VERSION}-r${PKG_RELEASE} \ |
|
||||
nginx-module-geoip=${NGINX_VERSION}-r${PKG_RELEASE} \ |
|
||||
nginx-module-image-filter=${NGINX_VERSION}-r${PKG_RELEASE} \ |
|
||||
nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${PKG_RELEASE} \ |
|
||||
" \ |
|
||||
&& case "$apkArch" in \ |
|
||||
x86_64) \ |
|
||||
# arches officially built by upstream |
|
||||
set -x \ |
|
||||
&& KEY_SHA512="e7fa8303923d9b95db37a77ad46c68fd4755ff935d0a534d26eba83de193c76166c68bfe7f65471bf8881004ef4aa6df3e34689c305662750c0172fca5d8552a *stdin" \ |
|
||||
&& apk add --no-cache --virtual .cert-deps \ |
|
||||
openssl \ |
|
||||
&& wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub \ |
|
||||
&& if [ "$(openssl rsa -pubin -in /tmp/nginx_signing.rsa.pub -text -noout | openssl sha512 -r)" = "$KEY_SHA512" ]; then \ |
|
||||
echo "key verification succeeded!"; \ |
|
||||
mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; \ |
|
||||
else \ |
|
||||
echo "key verification failed!"; \ |
|
||||
exit 1; \ |
|
||||
fi \ |
|
||||
&& apk del .cert-deps \ |
|
||||
&& apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages \ |
|
||||
;; \ |
|
||||
*) \ |
|
||||
# we're on an architecture upstream doesn't officially build for |
|
||||
# let's build binaries from the published packaging sources |
|
||||
set -x \ |
|
||||
&& tempDir="$(mktemp -d)" \ |
|
||||
&& chown nobody:nobody $tempDir \ |
|
||||
&& apk add --no-cache --virtual .build-deps \ |
|
||||
gcc \ |
|
||||
libc-dev \ |
|
||||
make \ |
|
||||
openssl-dev \ |
|
||||
pcre-dev \ |
|
||||
zlib-dev \ |
|
||||
linux-headers \ |
|
||||
libxslt-dev \ |
|
||||
gd-dev \ |
|
||||
geoip-dev \ |
|
||||
perl-dev \ |
|
||||
libedit-dev \ |
|
||||
mercurial \ |
|
||||
bash \ |
|
||||
alpine-sdk \ |
|
||||
findutils \ |
|
||||
&& su nobody -s /bin/sh -c " \ |
|
||||
export HOME=${tempDir} \ |
|
||||
&& cd ${tempDir} \ |
|
||||
&& hg clone https://hg.nginx.org/pkg-oss \ |
|
||||
&& cd pkg-oss \ |
|
||||
&& hg up ${NGINX_VERSION}-${PKG_RELEASE} \ |
|
||||
&& cd alpine \ |
|
||||
&& make all \ |
|
||||
&& apk index -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk \ |
|
||||
&& abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz \ |
|
||||
" \ |
|
||||
&& cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ \ |
|
||||
&& apk del .build-deps \ |
|
||||
&& apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages \ |
|
||||
;; \ |
|
||||
esac \ |
|
||||
# if we have leftovers from building, let's purge them (including extra, unnecessary build deps) |
|
||||
&& if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi \ |
|
||||
&& if [ -n "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi \ |
|
||||
&& if [ -n "/etc/apk/keys/nginx_signing.rsa.pub" ]; then rm -f /etc/apk/keys/nginx_signing.rsa.pub; fi \ |
|
||||
# Bring in gettext so we can get `envsubst`, then throw |
|
||||
# the rest away. To do this, we need to install `gettext` |
|
||||
# then move `envsubst` out of the way so `gettext` can |
|
||||
# be deleted completely, then move `envsubst` back. |
|
||||
&& apk add --no-cache --virtual .gettext gettext \ |
|
||||
&& mv /usr/bin/envsubst /tmp/ \ |
|
||||
\ |
|
||||
&& runDeps="$( \ |
|
||||
scanelf --needed --nobanner /tmp/envsubst \ |
|
||||
| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \ |
|
||||
| sort -u \ |
|
||||
| xargs -r apk info --installed \ |
|
||||
| sort -u \ |
|
||||
)" \ |
|
||||
&& apk add --no-cache $runDeps \ |
|
||||
&& apk del .gettext \ |
|
||||
&& mv /tmp/envsubst /usr/local/bin/ \ |
|
||||
# Bring in tzdata so users could set the timezones through the environment |
|
||||
# variables |
|
||||
&& apk add --no-cache tzdata \ |
|
||||
# forward request and error logs to docker log collector |
|
||||
&& ln -sf /dev/stdout /var/log/nginx/access.log \ |
|
||||
&& ln -sf /dev/stderr /var/log/nginx/error.log |
|
||||
|
|
||||
COPY default.conf /etc/nginx/conf.d/ |
|
||||
EXPOSE 8000 |
EXPOSE 8000 |
||||
|
|
||||
STOPSIGNAL SIGTERM |
STOPSIGNAL SIGTERM |
||||
|
|
||||
CMD ["nginx", "-g", "daemon off;"] |
CMD ["lighttpd", "-D", "-f", "/etc/lighttpd/lighttpd.conf"] |
||||
|
@ -1,45 +0,0 @@ |
|||||
server { |
|
||||
listen 8000; |
|
||||
server_name localhost; |
|
||||
|
|
||||
#charset koi8-r; |
|
||||
#access_log /var/log/nginx/host.access.log main; |
|
||||
|
|
||||
location / { |
|
||||
root /usr/share/nginx/html; |
|
||||
index index.html index.htm; |
|
||||
} |
|
||||
|
|
||||
#error_page 404 /404.html; |
|
||||
|
|
||||
# redirect server error pages to the static page /50x.html |
|
||||
# |
|
||||
error_page 500 502 503 504 /50x.html; |
|
||||
location = /50x.html { |
|
||||
root /usr/share/nginx/html; |
|
||||
} |
|
||||
|
|
||||
# proxy the PHP scripts to Apache listening on 127.0.0.1:80 |
|
||||
# |
|
||||
#location ~ \.php$ { |
|
||||
# proxy_pass http://127.0.0.1; |
|
||||
#} |
|
||||
|
|
||||
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 |
|
||||
# |
|
||||
#location ~ \.php$ { |
|
||||
# root html; |
|
||||
# fastcgi_pass 127.0.0.1:9000; |
|
||||
# fastcgi_index index.php; |
|
||||
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; |
|
||||
# include fastcgi_params; |
|
||||
#} |
|
||||
|
|
||||
# deny access to .htaccess files, if Apache's document root |
|
||||
# concurs with nginx's one |
|
||||
# |
|
||||
#location ~ /\.ht { |
|
||||
# deny all; |
|
||||
#} |
|
||||
} |
|
||||
|
|
@ -0,0 +1,12 @@ |
|||||
|
server.document-root = "/var/www/servers/apella-guide/" |
||||
|
|
||||
|
server.port = 8000 |
||||
|
|
||||
|
mimetype.assign = ( |
||||
|
".html" => "text/html", |
||||
|
".js" => "application/javascript", |
||||
|
".css" => "text/css", |
||||
|
".png" => "image/png" |
||||
|
) |
||||
|
|
||||
|
index-file.names = ( "index.html" ) |
Loading…
Reference in new issue