You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
90 lines
3.0 KiB
90 lines
3.0 KiB
FROM debian:12 AS builder |
|
|
|
LABEL maintainer="Yury Muski <muski.yury@gmail.com>" |
|
|
|
ENV NGINX_PATH /etc/nginx |
|
ENV NGINX_VERSION 1.19.6 |
|
|
|
ENV QUICHE_VERSION 0.18.0 |
|
|
|
WORKDIR /opt |
|
|
|
RUN apt-get update && \ |
|
DEBIAN_FRONTEND=noninteractive apt-get install -y libpcre3 libpcre3-dev zlib1g-dev zlib1g golang-go build-essential git curl cmake; |
|
|
|
RUN curl -O https://nginx.org/download/nginx-$NGINX_VERSION.tar.gz && \ |
|
tar xvzf nginx-$NGINX_VERSION.tar.gz && \ |
|
git clone --branch $QUICHE_VERSION --recursive https://github.com/cloudflare/quiche && \ |
|
git clone --recursive https://github.com/google/ngx_brotli.git && \ |
|
cd nginx-$NGINX_VERSION && \ |
|
patch -p01 < ../quiche/nginx/nginx-1.16.patch && \ |
|
curl https://sh.rustup.rs -sSf | sh -s -- -y -q && \ |
|
export PATH="$HOME/.cargo/bin:$PATH" && \ |
|
./configure \ |
|
--prefix=$NGINX_PATH \ |
|
--sbin-path=/usr/sbin/nginx \ |
|
--modules-path=/usr/lib/nginx/modules \ |
|
--conf-path=$NGINX_PATH/nginx.conf \ |
|
--error-log-path=/var/log/nginx/error.log \ |
|
--http-log-path=/var/log/nginx/access.log \ |
|
--pid-path=/var/run/nginx.pid \ |
|
--lock-path=/var/run/nginx.lock \ |
|
--http-client-body-temp-path=/var/cache/nginx/client_temp \ |
|
--http-proxy-temp-path=/var/cache/nginx/proxy_temp \ |
|
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \ |
|
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \ |
|
--http-scgi-temp-path=/var/cache/nginx/scgi_temp \ |
|
--user=nginx \ |
|
--group=nginx \ |
|
--with-compat \ |
|
--with-file-aio \ |
|
--with-threads \ |
|
--with-http_addition_module \ |
|
--with-http_auth_request_module \ |
|
--with-http_dav_module \ |
|
--with-http_flv_module \ |
|
--with-http_gunzip_module \ |
|
--with-http_gzip_static_module \ |
|
--with-http_mp4_module \ |
|
--with-http_random_index_module \ |
|
--with-http_realip_module \ |
|
--with-http_secure_link_module \ |
|
--with-http_slice_module \ |
|
--with-http_ssl_module \ |
|
--with-http_stub_status_module \ |
|
--with-http_sub_module \ |
|
--with-http_v2_module \ |
|
--with-mail \ |
|
--with-mail_ssl_module \ |
|
--with-stream \ |
|
--with-stream_realip_module \ |
|
--with-stream_ssl_module \ |
|
--with-stream_ssl_preread_module \ |
|
--add-module=/opt/ngx_brotli \ |
|
--with-http_v3_module \ |
|
--with-openssl=/opt/quiche/deps/boringssl \ |
|
--build="quiche-$(git --git-dir=../quiche/.git rev-parse --short HEAD)" \ |
|
--with-quiche=/opt/quiche &&\ |
|
make && \ |
|
make install; |
|
|
|
FROM debian:12-slim |
|
|
|
COPY --from=builder /usr/sbin/nginx /usr/sbin/ |
|
COPY --from=builder /etc/nginx/ /etc/nginx/ |
|
|
|
|
|
RUN groupadd -g 1000 nginx \ |
|
&& useradd -m -u 1000 -d /var/cache/nginx -s /sbin/nologin -g nginx nginx \ |
|
# forward request and error logs to docker log collector |
|
&& mkdir -p /var/log/nginx \ |
|
&& touch /var/log/nginx/access.log /var/log/nginx/error.log \ |
|
&& chown nginx: /var/log/nginx/access.log /var/log/nginx/error.log \ |
|
&& ln -sf /dev/stdout /var/log/nginx/access.log \ |
|
&& ln -sf /dev/stderr /var/log/nginx/error.log |
|
|
|
EXPOSE 80 443 |
|
|
|
STOPSIGNAL SIGTERM |
|
|
|
CMD ["nginx", "-g", "daemon off;"]
|
|
|