74 lines
1.9 KiB
Docker
74 lines
1.9 KiB
Docker
FROM macbre/nginx-http3
|
|
|
|
# Zurück zu root wechseln
|
|
USER root
|
|
|
|
# Entferne Default-Site
|
|
RUN rm -f /etc/nginx/conf.d/default.conf || true
|
|
|
|
# Verzeichnisse erstellen
|
|
RUN mkdir -p /var/cache/nginx /var/log/nginx /var/www/ssl && \
|
|
chmod 755 /var/cache/nginx /var/log/nginx /var/www/ssl
|
|
|
|
# Konfigurationen kopieren
|
|
COPY ./nginx.conf /etc/nginx/nginx.conf
|
|
COPY ./default.conf /etc/nginx/conf.d/default.conf
|
|
COPY ./ssl/ /var/www/ssl/
|
|
|
|
# Entry-Script kopieren
|
|
COPY ./docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
|
|
RUN chmod +x /usr/local/bin/docker-entrypoint.sh
|
|
|
|
# su-exec und netcat installieren
|
|
RUN apk add --no-cache su-exec netcat-openbsd
|
|
|
|
# Berechtigungen für stdout/stderr anpassen
|
|
RUN chmod a+rw /dev/stdout /dev/stderr
|
|
|
|
# Ordner-Berechtigungen für den nginx-User setzen
|
|
RUN chown -R nginx:nginx /var/cache/nginx /var/log/nginx /var/www/ssl
|
|
|
|
EXPOSE 80 443
|
|
|
|
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
|
|
#CMD ["nginx", "-g", "daemon off;"]
|
|
|
|
|
|
|
|
|
|
|
|
## Standard-Konfiguration entfernen
|
|
#RUN rm -f /etc/nginx/conf.d/default.conf
|
|
#
|
|
## Verzeichnisse erstellen mit korrekten Berechtigungen
|
|
#RUN mkdir -p /var/cache/nginx /var/log/nginx /etc/nginx/template && \
|
|
# chmod -R 777 /var/cache/nginx /var/log/nginx
|
|
#
|
|
## Kopiere die Template-Konfiguration
|
|
#COPY ./nginx.conf /etc/nginx/nginx.conf
|
|
#COPY ./default.conf /etc/nginx/conf.d/default.conf
|
|
#
|
|
## Kopiert config Include
|
|
#COPY ./vite-proxy.inc.dev /etc/nginx/vite-proxy.inc
|
|
#
|
|
## Kopiere die SSL-Zertifikate
|
|
#COPY ./ssl/ /etc/nginx/ssl/
|
|
#
|
|
## Startup-Skript zum Ersetzen der Variablen
|
|
#COPY ./docker-entrypoint.sh /
|
|
#RUN chmod +x /docker-entrypoint.sh
|
|
#
|
|
##Install Netcat
|
|
#RUN apk add --no-cache netcat-openbsd
|
|
#
|
|
#
|
|
## Als user www-data laufen lassen
|
|
#RUN addgroup -g 1000 www && adduser -D -G www -u 1000 www-data \
|
|
# && chown -R www-data:www /var/cache/nginx /var/log/nginx /etc/nginx
|
|
#USER www-data
|
|
#
|
|
#EXPOSE 80 443
|
|
#
|
|
#ENTRYPOINT ["/docker-entrypoint.sh"]
|
|
#CMD ["nginx", "-g", "daemon off;"]
|