FROM alpine:3.18@sha256:7144f7bab3d4c2648d7e59409f15ec52a18006a128c733fcff20d3a4a54ba44a

LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.title="nginx"
LABEL org.opencontainers.image.url="https://gitea.rknet.org/docker/nginx"
LABEL org.opencontainers.image.source="https://gitea.rknet.org/docker/nginx"
LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/docker/nginx"

ARG TARGETOS
ARG TARGETARCH
ARG TARGETVARIANT

ARG GOMPLATE_VERSION
ARG CONTAINER_LIBRARY

# renovate: datasource=github-releases depName=hairyhenderson/gomplate
ENV GOMPLATE_VERSION="${GOMPLATE_VERSION:-v3.11.5}"
# renovate: datasource=git-tags depName=https://gitea.rknet.org/docker/container-library
ENV CONTAINER_LIBRARY="${CONTAINER_LIBRARY:-v0.1.3}"

RUN addgroup -g 1001 -S nginx && \
    adduser -S -D -H -u 1001 -h /var/www -s /sbin/nologin -G nginx -g nginx nginx && \
    apk --update add --virtual .build-deps curl && \
    apk --update --no-cache add inotify-tools ca-certificates && \
    apk --update --no-cache add openresty --repository=https://dl-cdn.alpinelinux.org/alpine/edge/testing/ && \
    rm -rf /etc/nginx/conf.d && \
    curl -SsfL "https://gitea.rknet.org/docker/container-library/releases/download/${CONTAINER_LIBRARY}/container-library.tar.gz" | tar xz -C / && \
    curl -SsfL -o /usr/local/bin/gomplate "https://github.com/hairyhenderson/gomplate/releases/download/${GOMPLATE_VERSION}/gomplate_${TARGETOS}-${TARGETARCH}${TARGETVARIANT}" && \
    chmod 755 /usr/local/bin/gomplate && \
    apk del .build-deps && \
    rm -rf /var/cache/apk/* && \
    rm -rf /tmp/*

ADD overlay/ /

RUN mkdir -p /var/www /etc/proxy-config /etc/nginx/conf.d /var/tmp/nginx /var/cache/nginx && \
    touch /run/nginx.pid && \
    touch /etc/nginx/conf.d/vhost.conf && \
    chown nginx /run/nginx.pid && \
    chown -R nginx /var/log/nginx /var/tmp/nginx /var/cache/nginx && \
    chown -R nginx:nginx /var/www && \
    chown -R root:nginx /etc/nginx /etc/nginx/conf.d && \
    chmod -R 640 /etc/nginx /etc/nginx/conf.d && \
    chmod 750 /var/www /var/cache/nginx /etc/proxy-config /etc/nginx /etc/nginx/conf.d

EXPOSE 8080

STOPSIGNAL SIGTERM

ENTRYPOINT ["/usr/local/bin/entrypoint", "server"]
WORKDIR /var/www
CMD []