koreader-sync-server/Dockerfile at master · koreader/koreader-sync-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
FROM debian:trixie-slim

# install system dependencies
RUN apt-get update \
    && apt-get install --no-install-recommends -y \
        ca-certificates curl \
        libreadline-dev libncurses5-dev libpcre2-dev libssl-dev \
        build-essential git openssl \
        luarocks unzip redis-server \
        zlib1g-dev \
        runit \
    && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

ARG OPENRESTY_VER=1.29.2.3
ENV PATH=/opt/openresty/nginx/sbin:$PATH

WORKDIR /app
RUN curl -fL "https://openresty.org/download/openresty-${OPENRESTY_VER}.tar.gz" -o openresty-${OPENRESTY_VER}.tar.gz \
        && tar zxvf openresty-${OPENRESTY_VER}.tar.gz \
        && cd openresty-${OPENRESTY_VER} \
            && ./configure --prefix=/opt/openresty \
            && make && make install \
        && cd .. \
            && rm -rf openresty-${OPENRESTY_VER} openresty-${OPENRESTY_VER}.tar.gz /tmp/*

RUN mkdir -p /etc/nginx/ssl \
    && openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
        -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt -subj "/"

# copy only the patch needed for the gin build step
COPY gin.patch /tmp/gin.patch

# patch gin for https support
RUN git clone https://github.com/ostinelli/gin \
    && cd gin \
    && patch -N -p1 < /tmp/gin.patch \
    && luarocks make --tree=/usr/local \
    && cd .. \
    && rm -rf gin

# install lua dependencies after gin to avoid gin's pinned old versions overwriting them
RUN luarocks remove --force luasocket 3.0rc1-2 \
    && luarocks install luasocket \
    && luarocks install luasec \
    && luarocks install redis-lua \
    && luarocks install busted \
    && rm -rf /tmp/*

# create daemons
RUN mkdir /etc/service/redis-server \
    && printf '#!/bin/sh\nexec redis-server /app/koreader-sync-server/config/redis.conf\n' > \
        /etc/service/redis-server/run \
    && chmod +x /etc/service/redis-server/run

ENV ENABLE_USER_REGISTRATION=true
ENV GIN_ENV=production

# add app source code after so app changes don't invalidate dependency layers
# but before starting the app
COPY ./ koreader-sync-server

# append 'daemon off;' at runtime so tests can still use the config normally
# grep from start of line only; nginx.conf has daemon off commented out by default
RUN mkdir /etc/service/koreader-sync-server \
    && printf "#!/bin/sh\ngrep -q '^daemon off;' /app/koreader-sync-server/config/nginx.conf || echo 'daemon off;' >> /app/koreader-sync-server/config/nginx.conf\ncd /app/koreader-sync-server\nexec gin start" > \
        /etc/service/koreader-sync-server/run \
    && chmod +x /etc/service/koreader-sync-server/run

VOLUME ["/var/log/redis", "/var/lib/redis"]

EXPOSE 7200

HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
    CMD /app/koreader-sync-server/scripts/healthcheck.sh

CMD ["/usr/bin/runsvdir", "-P", "/etc/service"]