FROM docker.io/alpine:3.20@sha256:77726ef6b57ddf65bb551896826ec38bc3e53f75cdde31354fbffb4f25238ebd

LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.title="nginx-s3"
LABEL org.opencontainers.image.url="https://gitea.rknet.org/container/nginx-s3"
LABEL org.opencontainers.image.source="https://gitea.rknet.org/container/nginx-s3"
LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/container/nginx-s3"

ARG TARGETOS
ARG TARGETARCH
ARG TARGETVARIANT

ARG GOMPLATE_VERSION
ARG CONTAINER_LIBRARY

# renovate: datasource=github-releases depName=hairyhenderson/gomplate
ENV GOMPLATE_VERSION="${GOMPLATE_VERSION:-v3.11.7}"
# renovate: datasource=git-tags depName=https://gitea.rknet.org/container/container-library
ENV CONTAINER_LIBRARY="${CONTAINER_LIBRARY:-v0.1.3}"

RUN addgroup -g 1001 -S nginx && \
    adduser -S -D -H -u 1001 -h /var/www -s /sbin/nologin -G nginx -g nginx nginx && \
    apk --update add --virtual .build-deps curl && \
    apk --update --no-cache add inotify-tools ca-certificates && \
    apk --update --no-cache add openresty --repository=https://dl-cdn.alpinelinux.org/alpine/edge/community/ && \
    apk --no-cache upgrade libcrypto3 libssl3 && \
    rm -rf /etc/nginx/conf.d && \
    curl -SsfL "https://gitea.rknet.org/container/container-library/releases/download/${CONTAINER_LIBRARY}/container-library.tar.gz" | tar xz -C / && \
    curl -SsfL -o /usr/local/bin/gomplate "https://github.com/hairyhenderson/gomplate/releases/download/${GOMPLATE_VERSION}/gomplate_${TARGETOS}-${TARGETARCH}${TARGETVARIANT}" && \
    chmod 755 /usr/local/bin/gomplate && \
    apk del .build-deps && \
    rm -rf /var/cache/apk/* && \
    rm -rf /tmp/*

ADD overlay/ /

RUN mkdir -p /var/www /etc/nginx-s3 /etc/nginx/conf.d /var/tmp/nginx /var/cache/nginx && \
    touch /etc/nginx/conf.d/vhosts.conf && \
    chown -R nginx /var/tmp/nginx /var/cache/nginx && \
    chown -R nginx:nginx /var/www && \
    chown -R root:nginx /etc/nginx /etc/nginx/conf.d && \
    chmod -R 640 /etc/nginx /etc/nginx/conf.d && \
    chmod 750 /var/www /var/cache/nginx /etc/nginx-s3 /etc/nginx /etc/nginx/conf.d

EXPOSE 8080

STOPSIGNAL SIGTERM

ENTRYPOINT ["/usr/local/bin/entrypoint", "server"]
WORKDIR /var/www
CMD []