39 lines
1.1 KiB
Docker
39 lines
1.1 KiB
Docker
|
FROM alpine:3.11
|
||
|
|
|
||
|
|
LABEL maintainer="Robert Kaussow <mail@geeklabor.de>" \
|
||
|
|
org.label-schema.name="bitwardenrs" \
|
||
|
|
org.label-schema.version="1.2" \
|
||
|
|
org.label-schema.vendor="Robert Kaussow" \
|
||
|
|
org.label-schema.schema-version="1.0"
|
||
|
|
|
||
|
|
ARG VAULT_VERSION=2.12.0b
|
||
|
|
ARG VAULT_TARBALL=https://github.com/dani-garcia/bw_web_builds/releases/download/v${VAULT_VERSION}/bw_web_v${VAULT_VERSION}.tar.gz
|
||
|
|
|
||
|
|
RUN addgroup -g 101 -S app && \
|
||
|
|
adduser -S -D -H -u 101 -h /app -s /sbin/nologin -G app -g app app && \
|
||
|
|
apk --update add --virtual .build-deps tar && \
|
||
|
|
apk --update add openssl curl postgresql-libs ca-certificates && \
|
||
|
|
mkdir -p /app/web-vault && \
|
||
|
|
curl -SsL ${VAULT_TARBALL} | tar xz -C /app/web-vault && \
|
||
|
|
apk del .build-deps && \
|
||
|
|
rm -rf /var/cache/apk/* && \
|
||
|
|
rm -rf /tmp/* && \
|
||
|
|
chown -R app:app /app
|
||
|
|
|
||
|
|
ADD overlay/ /
|
||
|
|
ADD source/Rocket.toml /app
|
||
|
|
ADD source/target/x86_64-unknown-linux-musl/release/bitwarden_rs /app
|
||
|
|
|
||
|
|
VOLUME /data
|
||
|
|
|
||
|
|
EXPOSE 8080
|
||
|
|
|
||
|
|
USER app
|
||
|
|
|
||
|
|
STOPSIGNAL SIGTERM
|
||
|
|
|
||
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|
||
|
|
HEALTHCHECK --interval=30s --timeout=5s --retries=3 CMD /usr/local/bin/healthcheck.sh
|
||
|
|
WORKDIR /app
|
||
|
|
CMD []
|