Dockerfile

FROM node:10-alpine
WORKDIR /usr/src/app
RUN apk add git
COPY package.json .
COPY package-lock.json .
COPY bundler.js .
COPY src src
RUN mv src/app/index.html src/app/index.html.template
RUN npm ci --production
# postinstall needs to be called manually, cf. https://github.com/npm/npm-lifecycle/issues/49 :
RUN npm install buildify && npm run postinstall

FROM nginx:1.15-alpine
LABEL maintainer="Team Avengers @ oui.sncf"
COPY --from=0 /usr/src/app/src/app                  /usr/share/nginx/html/
COPY --from=0 /usr/src/app/src/app/img/favicon.ico  /usr/share/nginx/html/
RUN rm                                              /etc/nginx/conf.d/default.conf
COPY nginx.conf                                     /etc/nginx/conf.d/hesperides.conf.template
RUN nginx -t

ARG BUILD_TIME
ENV BUILD_TIME=$BUILD_TIME
ARG GIT_BRANCH
ENV GIT_BRANCH=$GIT_BRANCH
ARG GIT_COMMIT
ENV GIT_COMMIT=$GIT_COMMIT
ARG GIT_COMMIT_MSG
ENV GIT_COMMIT_MSG=$GIT_COMMIT_MSG
ARG GIT_TAG
ENV GIT_TAG=$GIT_TAG
ENV SENTRY_TAGS=GIT_BRANCH:$GIT_BRANCH,GIT_COMMIT:$GIT_COMMIT,GIT_TAG:$GIT_TAG

RUN apk add bash
COPY docker_entrypoint.sh                           /
RUN chmod u+x                                       /docker_entrypoint.sh

# implement changes required to run NGINX as an unprivileged user
ARG UID=101
ARG GID=101
RUN sed -i '/user  nginx;/d' /etc/nginx/nginx.conf \
    && sed -i 's,/var/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf \
    && sed -i "/^http {/a \    proxy_temp_path /tmp/proxy_temp;\n    client_body_temp_path /tmp/client_temp;\n    fastcgi_temp_path /tmp/fastcgi_temp;\n    uwsgi_temp_path /tmp/uwsgi_temp;\n    scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf \
# nginx user must own the cache and etc directory to write cache and tweak the nginx config
    && chown -R $UID:$GID /var/cache/nginx /etc/nginx /usr/share/nginx/html /docker_entrypoint.sh \
    && chmod -R g+w /var/cache/nginx /etc/nginx /usr/share/nginx/html

USER $UID

ENTRYPOINT ["/docker_entrypoint.sh"]