Matthew Baggett
2fd5c62074
* Initial work * Setup script stub * Wrap runit and call dos2unix beforehand. * Working to the point I need to make it sync in and out of s3. * Seems like we're done and its working. * Add build process. * Add build process. * Bugfixes discovered during deployment. * Copy certs into /live because certbot is a pain. * More elegant about hammering letsencrypt. * Working!
48 lines
No EOL
1.7 KiB
Docker
48 lines
No EOL
1.7 KiB
Docker
FROM benzine/php:cli-8.0
|
|
LABEL maintainer="Matthew Baggett <matthew@baggett.me>" \
|
|
org.label-schema.vcs-url="https://github.com/benzine-framework/docker"
|
|
COPY self-signed-certificates /certs
|
|
|
|
# Install nginx, certbot
|
|
RUN apt-get -qq update && \
|
|
# Install pre-dependencies to use apt-key.
|
|
apt-get -yqq install --no-install-recommends \
|
|
lsb-core \
|
|
gnupg \
|
|
&& \
|
|
# Add nginx ppa
|
|
sh -c 'echo "deb http://ppa.launchpad.net/nginx/stable/ubuntu $(lsb_release -sc) main" \
|
|
> /etc/apt/sources.list.d/nginx-stable.list' && \
|
|
# Add nginx key
|
|
apt-key adv --keyserver keyserver.ubuntu.com --recv-keys C300EE8C && \
|
|
apt-get -qq update && \
|
|
apt-get -yqq install --no-install-recommends \
|
|
nginx \
|
|
python-certbot-nginx \
|
|
&& \
|
|
apt-get remove -yqq \
|
|
lsb-core \
|
|
cups-common \
|
|
&& \
|
|
apt-get autoremove -yqq && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* /var/lib/dpkg/status.old /var/cache/debconf/templates.dat /var/log/dpkg.log /var/log/lastlog /var/log/apt/*.log
|
|
|
|
VOLUME /etc/letsencrypt
|
|
|
|
COPY nginx.runit /etc/service/nginx/run
|
|
COPY logs.runit /etc/service/nginx-logs/run
|
|
COPY bouncer.runit /etc/service/bouncer/run
|
|
COPY logs-nginx-access.runit /etc/service/logs-nginx-access/run
|
|
COPY logs-nginx-error.runit /etc/service/logs-nginx-error/run
|
|
RUN chmod +x /etc/service/*/run
|
|
COPY NginxDefault /etc/nginx/sites-enabled/default
|
|
COPY NginxSSL /etc/nginx/sites-enabled/default-ssl
|
|
COPY NginxTemplate.twig /app/
|
|
# Disable daemonising in nginx
|
|
RUN sed -i '1s;^;daemon off\;\n;' /etc/nginx/nginx.conf
|
|
COPY bouncer /app
|
|
COPY composer.* /app/
|
|
RUN composer install && \
|
|
chmod +x /app/bouncer && \
|
|
mkdir -p /var/log/bouncer |