Dockerfile

FROM golang:1.23-alpine AS doclig-build
COPY tools/doclig /doclig

WORKDIR /doclig
RUN set +x && \
    apk add --no-cache upx && \
    CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" -o doclig ./src && \
    time upx --brute doclig && \
    set x

FROM debian:bookworm-slim
ENV PHP_VERSION=8.2

ARG USER=hoax

LABEL maintainer="Thorsten Winkler"
LABEL description="http-over-all"

# os part
ENV WEBDAV=/var/www/dav
ENV DEBIAN_FRONTEND=noninteractive
ENV TZ=Europe/Berlin

RUN set -x && \
    apt-get update -y && \
    apt-get dist-upgrade -y && \
    APT_SYSTEM="sudo tzdata ca-certificates" && \
    APT_HTTP="nginx nginx-extras" && \
    APT_PHP="php-curl php-fpm php-mbstring" && \
    APT_SERVICES="openssl sshfs nfs-common davfs2 cifs-utils git" && \
    APT_TOOLS="iputils-ping curl rsync" && \
    APT_ETC="nano" && \
    apt-get install -y --no-install-recommends ${APT_SYSTEM} ${APT_HTTP} ${APT_PHP} ${APT_SERVICES} ${APT_TOOLS} ${APT_ETC} && \
    rm -f /var/www/html/index.nginx-debian.html ; rm -f /etc/nginx/mime.types && \
    # debian cleanup \
    #apt-get autoremove -y && \
    rm -rf /var/lib/apt/lists/* ; rm -f /var/lib/dpkg/*-old ; rm -rf /usr/share/doc && \
    echo "OS part successfully terminated" && \
    set +x

COPY --from=doclig-build /doclig/doclig /usr/local/bin

ENV LANG=C.UTF-8
ENV LC_ALL=C.UTF-8

ENV PHP_ETC=/etc/php/$PHP_VERSION
ENV PHP_SERVICE=php${PHP_VERSION}-fpm
ENV PHP_SOCK=/var/run/php/php${PHP_VERSION}-fpm.sock
ENV PHP_LOG_SYSOUT=true

# http-over-all part
ARG RELEASE="1.2.0-19p03"

ARG SSL_COUNTRY=DE
ARG SSL_STATE=Berlin
ARG SSL_LOCALITY=Berlin
ARG SSL_ORGANIZATION=http-over-all
ARG SSL_ORGANIZATIONALUNIT=IT
ARG SSL_EMAILADDRESS=noreply@no.com
ARG SSL_COMMONNAME=http-over-all

ENV HTDOCS=/var/www/html
ENV START_CMD="/bin/bash http-over-all.sh"
ENV DATA=/remote

ADD incontainer /scripts
WORKDIR /scripts

RUN set -x && \
    openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx.key -out /etc/ssl/certs/nginx.crt -subj "/C=${SSL_COUNTRY}/ST=${SSL_STATE}/L=${SSL_LOCALITY}/O=${SSL_ORGANIZATION}/OU=${SSL_ORGANIZATIONALUNIT}/CN=${SSL_COMMONNAME}/emailAddress=${SSL_EMAILADDRESS}" && \
    # https://wiki.ubuntuusers.de/sudo/Konfiguration/
    # https://kofler.info/sudo-ohne-passwort/ \
    groupadd -g 1000 $USER && \
    useradd -d /home/$USER -u 1000 -g 1000 -m -s /bin/bash $USER && \
    echo "$USER ALL=(ALL) NOPASSWD: /scripts/force-update.sh" > /etc/sudoers.d/$USER && \
    echo "www-data ALL=(ALL) NOPASSWD: /scripts/force-update.sh" >> /etc/sudoers.d/www-data && \
    echo "$USER ALL=(ALL) NOPASSWD:SETENV: /scripts/http-over-all.sh" >> /etc/sudoers.d/$USER && \
    echo "$USER ALL=(ALL) NOPASSWD:SETENV: /scripts/shutdown-services.sh" >> /etc/sudoers.d/$USER && \
    chmod 0440 /etc/sudoers.d/$USER && \
    chmod 0440 /etc/sudoers.d/www-data && \
    find /scripts -name "*.sh" -exec sed -i 's/\r$//' {} + && \
    echo "\nexport RELEASE=${RELEASE}\n" >> /scripts/system-helper.sh && \
    echo "source /scripts/system-helper.sh" >> /etc/bash.bashrc && \
    # colors (bash)
    sed -i 's/^# export/export/' /root/.bashrc && \
    sed -i 's/^# alias l/alias l/g' /root/.bashrc && \
    echo "alias grep=\"grep --color=always\"" >> /root/.bashrc && \
    echo "alias grep=\"grep --color=always\"" >> /home/$USER/.bashrc && \
    set +x

HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 CMD [ "/scripts/healthcheck.sh" ]
USER $USER
ENTRYPOINT ["/scripts/docker-run-wrapper.sh"]