mirror of
https://github.com/yurymuski/nginx-http3.git
synced 2026-09-26 22:16:10 +00:00
95 lines
3.2 KiB
Docker
95 lines
3.2 KiB
Docker
FROM ubuntu:20.04 AS builder
|
|
|
|
LABEL maintainer="Yury Muski <muski.yury@gmail.com>"
|
|
|
|
ENV NGINX_PATH /etc/nginx
|
|
ENV NGINX_VERSION 1.16.1
|
|
|
|
ENV QUICHE_VERSION 0.18.0
|
|
|
|
WORKDIR /opt
|
|
|
|
RUN apt-get update && \
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y libpcre3 libpcre3-dev zlib1g-dev zlib1g golang-go build-essential libbrotli-dev git curl cmake;
|
|
|
|
RUN curl -O https://nginx.org/download/nginx-$NGINX_VERSION.tar.gz && \
|
|
tar xvzf nginx-$NGINX_VERSION.tar.gz && \
|
|
git clone --branch $QUICHE_VERSION --recursive https://github.com/cloudflare/quiche && \
|
|
cd /opt/quiche && git submodule update --init && cd /opt/ && \
|
|
git clone --recursive https://github.com/google/ngx_brotli.git && \
|
|
cd nginx-$NGINX_VERSION && \
|
|
patch -p01 < ../quiche/nginx/nginx-1.16.patch && \
|
|
curl https://sh.rustup.rs -sSf | sh -s -- -y -q && \
|
|
export PATH="$HOME/.cargo/bin:$PATH" && \
|
|
./configure \
|
|
--prefix=$NGINX_PATH \
|
|
--sbin-path=/usr/sbin/nginx \
|
|
--modules-path=/usr/lib/nginx/modules \
|
|
--conf-path=$NGINX_PATH/nginx.conf \
|
|
--error-log-path=/var/log/nginx/error.log \
|
|
--http-log-path=/var/log/nginx/access.log \
|
|
--pid-path=/var/run/nginx.pid \
|
|
--lock-path=/var/run/nginx.lock \
|
|
--http-client-body-temp-path=/var/cache/nginx/client_temp \
|
|
--http-proxy-temp-path=/var/cache/nginx/proxy_temp \
|
|
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
|
|
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
|
|
--http-scgi-temp-path=/var/cache/nginx/scgi_temp \
|
|
--user=nginx \
|
|
--group=nginx \
|
|
--with-compat \
|
|
--with-file-aio \
|
|
--with-threads \
|
|
--with-http_addition_module \
|
|
--with-http_auth_request_module \
|
|
--with-http_dav_module \
|
|
--with-http_flv_module \
|
|
--with-http_gunzip_module \
|
|
--with-http_gzip_static_module \
|
|
--with-http_mp4_module \
|
|
--with-http_random_index_module \
|
|
--with-http_realip_module \
|
|
--with-http_secure_link_module \
|
|
--with-http_slice_module \
|
|
--with-http_ssl_module \
|
|
--with-http_stub_status_module \
|
|
--with-http_sub_module \
|
|
--with-http_v2_module \
|
|
--with-mail \
|
|
--with-mail_ssl_module \
|
|
--with-stream \
|
|
--with-stream_realip_module \
|
|
--with-stream_ssl_module \
|
|
--with-stream_ssl_preread_module \
|
|
--add-module=/opt/ngx_brotli \
|
|
--with-http_v3_module \
|
|
--with-openssl=/opt/quiche/quiche/deps/boringssl \
|
|
--build="quiche-$(git --git-dir=../quiche/.git rev-parse --short HEAD)" \
|
|
--with-quiche=/opt/quiche &&\
|
|
make && \
|
|
make install;
|
|
|
|
FROM ubuntu:20.04
|
|
|
|
RUN apt-get update && \
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y libpcre3 libbrotli1
|
|
|
|
COPY --from=builder /usr/sbin/nginx /usr/sbin/
|
|
COPY --from=builder /etc/nginx/ /etc/nginx/
|
|
|
|
|
|
RUN groupadd -g 1000 nginx \
|
|
&& useradd -m -u 1000 -d /var/cache/nginx -s /sbin/nologin -g nginx nginx \
|
|
# forward request and error logs to docker log collector
|
|
&& mkdir -p /var/log/nginx \
|
|
&& touch /var/log/nginx/access.log /var/log/nginx/error.log \
|
|
&& chown nginx: /var/log/nginx/access.log /var/log/nginx/error.log \
|
|
&& ln -sf /dev/stdout /var/log/nginx/access.log \
|
|
&& ln -sf /dev/stderr /var/log/nginx/error.log
|
|
|
|
EXPOSE 80 443
|
|
|
|
STOPSIGNAL SIGTERM
|
|
|
|
CMD ["nginx", "-g", "daemon off;"]
|