-
Notifications
You must be signed in to change notification settings - Fork 51
/
Dockerfile-nginx
68 lines (50 loc) · 1.86 KB
/
Dockerfile-nginx
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
# Multistage build to reduce image size and increase security
FROM node:16-bullseye-slim AS build
# Install requirements to clone repository and install deps
RUN apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get install -yq git \
&& npm install -g bower
# Get cryptpad from repository submodule
COPY cryptpad /cryptpad
WORKDIR /cryptpad
# Install dependencies
RUN npm install --production \
&& npm install -g bower \
&& bower install --allow-root
# Create actual cryptpad image
FROM node:16-bullseye-slim
RUN set -x \
# Create users and groups for cryptpad
&& groupadd -r -g 4001 cryptpad \
&& useradd -rMs /bin/false -d /dev/null -u 4001 -g 4001 cryptpad \
\
# Install packages
&& apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get install -yq --no-install-recommends nginx supervisor openssl zlib1g \
&& rm -rf /var/lib/apt/lists/* /etc/nginx
# Copy nginx conf from official image
COPY --from=nginx:latest /etc/nginx /etc/nginx
# Change nginx user and disable server tokens
RUN sed -i -e 's@\(^user\).*[^;]@\1 www-data@' \
-e "/default_type/a \\ server_tokens off;" /etc/nginx/nginx.conf
# Copy cryptpad with installed modules
COPY --from=build --chown=cryptpad /cryptpad /cryptpad
# Copy supervisord conf file
COPY supervisord.conf /etc/supervisord.conf
# Copy docker-entrypoint.sh script
COPY docker-entrypoint.sh /docker-entrypoint.sh
# Set workdir to cryptpad
WORKDIR /cryptpad
# Create directories
RUN mkdir blob block customize data datastore \
&& chown cryptpad:cryptpad blob block customize data datastore
# Volumes for data persistence
VOLUME /cryptpad/blob \
/cryptpad/block \
/cryptpad/customize \
/cryptpad/data \
/cryptpad/datastore
# Ports
EXPOSE 80 443
ENTRYPOINT ["/bin/sh", "/docker-entrypoint.sh"]
CMD ["/usr/bin/supervisord", "-n", "-c", "/etc/supervisord.conf"]