FROM thegeeklab/nginx:latest@sha256:5bcf0a021d468b65c5b3beb685212e98d59d82d272e4fe287f4b8bf9b8e17575

LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.title="FreshRSS"
LABEL org.opencontainers.image.url="https://gitea.rknet.org/docker/freshrss"
LABEL org.opencontainers.image.source="https://gitea.rknet.org/docker/freshrss"
LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/docker/freshrss"

ARG BUILD_VERSION

# renovate: datasource=github-releases depName=FreshRSS/FreshRSS
ENV FRESHRSS_VERSION="${BUILD_VERSION:-1.19.2}"

ADD overlay/ /

RUN apk --update add --virtual .build-deps tar curl && \
    apk --update add php8 php8-curl php8-fpm php8-gmp php8-intl php8-mbstring php8-xml \
      php8-zip php8-ctype php8-dom php8-fileinfo php8-iconv php8-json php8-opcache php8-phar \
      php8-session php8-simplexml php8-xmlreader php8-xmlwriter php8-tokenizer php8-zlib \
      php8-pdo_sqlite php8-pdo_mysql php8-pdo_pgsql && \
    rm -rf /var/www/localhost && \
    rm -f /etc/php8/php-fpm.d/www.conf && \
    mkdir -p /var/www/app && \
    mkdir /var/www/.postgresql && \
    FRESHRSS_VERSION="${FRESHRSS_VERSION##v}" && \
    echo "Installing FreshRSS version '${FRESHRSS_VERSION}' ..." && \
    curl -SsL "https://github.com/FreshRSS/FreshRSS/archive/${FRESHRSS_VERSION}.tar.gz" | \
      tar xz -C /var/www/app/ -X /.tarignore --strip-components=1 && \
    curl -SsL -o /etc/php8/browscap.ini https://browscap.org/stream?q=Lite_PHP_BrowsCapINI && \
    apk del .build-deps && \
    rm -rf /var/cache/apk/* && \
    rm -rf /tmp/* && \
    mkdir -p /var/run/php && \
    chown -R nginx /var/run/php && \
    mkdir -p /var/lib/php/tmp_upload && \
    mkdir -p /var/lib/php/soap_cache && \
    mkdir -p /var/lib/php/session && \
    chown -R nginx /var/lib/php && \
    chown nginx /etc/php8/php.ini && \
    chown -R nginx:nginx /var/www/.postgresql && \
    chown -R nginx:nginx /var/www/app

VOLUME /var/www/app/extensions
VOLUME /var/www/app/data

EXPOSE 8080

USER nginx

STOPSIGNAL SIGTERM

ENTRYPOINT ["/usr/local/bin/entrypoint"]
HEALTHCHECK --interval=30s --timeout=5s --retries=3 CMD /usr/local/bin/healthcheck
WORKDIR /var/www/app
CMD []