mirror of
https://github.com/bunkerity/bunkerized-nginx
synced 2023-12-13 21:30:18 +01:00
41 lines
1.1 KiB
Plaintext
41 lines
1.1 KiB
Plaintext
FROM alpine AS builder
|
|
|
|
ENV QEMU_URL https://github.com/balena-io/qemu/releases/download/v4.0.0%2Bbalena2/qemu-4.0.0.balena2-aarch64.tar.gz
|
|
RUN apk add curl && curl -L ${QEMU_URL} | tar zxvf - -C . --strip-components 1
|
|
|
|
FROM arm64v8/nginx:1.20.0-alpine
|
|
|
|
COPY --from=builder qemu-aarch64-static /usr/bin
|
|
|
|
COPY nginx-keys/ /tmp/nginx-keys
|
|
COPY compile.sh /tmp/compile.sh
|
|
RUN chmod +x /tmp/compile.sh && \
|
|
/tmp/compile.sh && \
|
|
rm -rf /tmp/*
|
|
|
|
COPY dependencies.sh /tmp/dependencies.sh
|
|
RUN chmod +x /tmp/dependencies.sh && \
|
|
/tmp/dependencies.sh && \
|
|
rm -rf /tmp/dependencies.sh
|
|
|
|
COPY entrypoint/ /opt/entrypoint
|
|
COPY confs/ /opt/confs
|
|
COPY scripts/ /opt/scripts
|
|
COPY lua/ /usr/local/lib/lua
|
|
|
|
COPY prepare.sh /tmp/prepare.sh
|
|
RUN chmod +x /tmp/prepare.sh && \
|
|
/tmp/prepare.sh && \
|
|
rm -f /tmp/prepare.sh
|
|
|
|
# fix CVE-2021-20205
|
|
RUN apk add "libjpeg-turbo>=2.1.0-r0"
|
|
|
|
VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache /pre-server-confs /acme-challenge
|
|
|
|
EXPOSE 8080/tcp 8443/tcp
|
|
|
|
USER nginx:nginx
|
|
|
|
ENTRYPOINT ["/opt/entrypoint/entrypoint.sh"]
|