coreos-home-server/service/nginx/Containerfile

FROM docker.io/debian:bookworm-slim
ARG VERSION=1.25

RUN apt-get update -y && apt-get install -y --no-install-recommends ca-certificates
ADD --chown=_apt https://nginx.org/keys/nginx_signing.key /etc/apt/trusted.gpg.d/nginx.asc

RUN echo "deb https://nginx.org/packages/mainline/debian bookworm nginx" > /etc/apt/sources.list.d/nginx.list && \
    apt-get update && apt-get install -y --no-install-recommends nginx="${VERSION}*" && \
    rm -Rf /etc/nginx

RUN addgroup --system --gid 10000 nginx-shared
RUN gpasswd --add nginx nginx-shared

COPY container/config /etc/nginx
COPY container/run-nginx /run-nginx

RUN nginx -t

EXPOSE 80 443
STOPSIGNAL SIGQUIT

ENTRYPOINT ["/run-nginx"]
nginx: Update to version 1.25, move to Quadlet 2023-08-12 15:31:31 +00:00			`FROM docker.io/debian:bookworm-slim`
			`ARG VERSION=1.25`

			`RUN apt-get update -y && apt-get install -y --no-install-recommends ca-certificates`
			`ADD --chown=_apt https://nginx.org/keys/nginx_signing.key /etc/apt/trusted.gpg.d/nginx.asc`

			`RUN echo "deb https://nginx.org/packages/mainline/debian bookworm nginx" > /etc/apt/sources.list.d/nginx.list && \`
			`apt-get update && apt-get install -y --no-install-recommends nginx="${VERSION}*" && \`
			`rm -Rf /etc/nginx`
First public release for CoreOS Home Server This contains the culmination of work done privately for a few months, and is intended to be a solid basis for other peoples' experimentations with setting up single-node, home-server setups using Fedora CoreOS. 2021-01-13 16:36:50 +00:00
nginx: Add default user to shared GID=10000 Users and groups used within Podman containers are usually assigned UID and GID 10000. Files for these containers are sometimes served by Nginx, and may be given permissions that restrict access to those outside the group, but which are intended to be served nonetheless. This commit adds the pre-defined `nginx` user to a `nginx-shared` group with GID 10000, which will then allow access to these files as needed. 2022-05-04 10:29:53 +00:00			`RUN addgroup --system --gid 10000 nginx-shared`
			`RUN gpasswd --add nginx nginx-shared`

First public release for CoreOS Home Server This contains the culmination of work done privately for a few months, and is intended to be a solid basis for other peoples' experimentations with setting up single-node, home-server setups using Fedora CoreOS. 2021-01-13 16:36:50 +00:00			`COPY container/config /etc/nginx`
nginx: Fix issues, consolidate naming Naming for services has been consolidated to `nginx-proxy` and `nginx-serve`, and issues with resolving underlying containers in the case of restarts have been fixed by way of resolver configuration. 2021-07-23 22:31:01 +00:00			`COPY container/run-nginx /run-nginx`
nginx: Add default user to shared GID=10000 Users and groups used within Podman containers are usually assigned UID and GID 10000. Files for these containers are sometimes served by Nginx, and may be given permissions that restrict access to those outside the group, but which are intended to be served nonetheless. This commit adds the pre-defined `nginx` user to a `nginx-shared` group with GID 10000, which will then allow access to these files as needed. 2022-05-04 10:29:53 +00:00
First public release for CoreOS Home Server This contains the culmination of work done privately for a few months, and is intended to be a solid basis for other peoples' experimentations with setting up single-node, home-server setups using Fedora CoreOS. 2021-01-13 16:36:50 +00:00			`RUN nginx -t`

			`EXPOSE 80 443`
nginx: Update to version 1.25, move to Quadlet 2023-08-12 15:31:31 +00:00			`STOPSIGNAL SIGQUIT`

nginx: Fix issues, consolidate naming Naming for services has been consolidated to `nginx-proxy` and `nginx-serve`, and issues with resolving underlying containers in the case of restarts have been fixed by way of resolver configuration. 2021-07-23 22:31:01 +00:00			`ENTRYPOINT ["/run-nginx"]`