FROM docker.io/alpine:3.20@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5

LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.title="nginx"
LABEL org.opencontainers.image.url="https://gitea.rknet.org/container/nginx"
LABEL org.opencontainers.image.source="https://gitea.rknet.org/container/nginx"
LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/container/nginx"

ARG TARGETOS
ARG TARGETARCH
ARG TARGETVARIANT

RUN addgroup -g 1001 -S nginx && \
    adduser -S -D -H -u 1001 -h /var/www -s /sbin/nologin -G nginx -g nginx nginx && \
    apk --update add --virtual .build-deps curl && \
    apk --update --no-cache add openresty ca-certificates && \
    apk --no-cache upgrade libcrypto3 libssl3 && \
    apk del .build-deps && \
    rm -rf /var/www && \
    rm -rf /etc/nginx/conf.d && \
    rm -rf /var/cache/apk/* && \
    rm -rf /tmp/*

ADD overlay/ /

RUN mkdir -p /var/tmp/nginx /var/cache/nginx && \
chown -R nginx /var/tmp/nginx /var/cache/nginx && \
chown -R nginx:nginx /usr/lib/nginx/nginx/html && \
chown -R root:nginx /etc/nginx /etc/nginx/conf.d && \
chmod -R 640 /etc/nginx /etc/nginx/conf.d && \
chmod 750 /usr/lib/nginx/nginx/html /var/cache/nginx /etc/nginx /etc/nginx/conf.d

EXPOSE 8080

STOPSIGNAL SIGTERM

WORKDIR /usr/lib/nginx/nginx/html
CMD ["nginx", "-e", "stderr", "-g", "daemon off;"]