Dockerfile.plus

FROM debian:bullseye-slim

ENV NGINX_PLUS_VERSION   29-1
ENV NGINX_VERSION        1.23.4
ENV NJS_VERSION          29+0.7.12-1
ENV XSLT_VERSION         29-1
 
ENV PROXY_CACHE_MAX_SIZE "10g"
ENV PROXY_CACHE_INACTIVE "60m"
ENV PROXY_CACHE_VALID_OK "1h"
ENV PROXY_CACHE_VALID_NOTFOUND "1m"
ENV PROXY_CACHE_VALID_FORBIDDEN "30s"
ENV CORS_ENABLED 0
ENV DIRECTORY_LISTING_PATH_PREFIX ""

COPY plus/etc/ssl /etc/ssl
COPY plus/usr /usr

# Copy files from the OSS NGINX Docker container such that the container
# startup is the same.
COPY common/docker-entrypoint.sh /docker-entrypoint.sh
COPY common/docker-entrypoint.d /docker-entrypoint.d/
COPY plus/docker-entrypoint.d /docker-entrypoint.d/
# Add NGINX Plus package repository keyring
COPY plus/usr/share/keyrings/nginx-archive-keyring.gpg /usr/share/keyrings/nginx-archive-keyring.gpg

RUN set -eux \
    export DEBIAN_FRONTEND=noninteractive; \
    # create nginx user/group first, to be consistent throughout docker variants
    addgroup --system --gid 101 nginx; \
    adduser --system --disabled-login --ingroup nginx --no-create-home --home /nonexistent --gecos "nginx user" --shell /bin/false --uid 101 nginx; \
    apt-get -qq update; \
    apt-get -qq upgrade --yes; \
    apt-get -qq install --yes \
      ca-certificates \
      curl \
      libedit2; \
    sh -a /usr/local/bin/add_nginx_plus_repo.sh; \
    rm /usr/local/bin/add_nginx_plus_repo.sh; \
    apt-get -qq update; \
    export DISTRO_VERSION="$(grep '^VERSION_CODENAME=' /etc/os-release | awk -v FS='=' '{print $2}')" && \
    apt-get -qq install --yes --no-install-recommends --no-install-suggests \
        nginx-plus=${NGINX_PLUS_VERSION}~${DISTRO_VERSION} \
        nginx-plus-module-njs=${NJS_VERSION}~${DISTRO_VERSION} \
        nginx-plus-module-xslt=${XSLT_VERSION}~${DISTRO_VERSION} \
        gettext-base; \
    apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
    rm -rf /etc/apt/sources.list.d/nginx-plus.list /var/lib/apt/lists/* /var/tmp/* /tmp/*; \
    # forward request and error logs to docker log collector
    ln -sf /dev/stdout /var/log/nginx/access.log; \
    ln -sf /dev/stderr /var/log/nginx/error.log; \
    chmod -R -v +x /docker-entrypoint.sh /docker-entrypoint.d/*.sh

ENTRYPOINT ["/docker-entrypoint.sh"]

EXPOSE 80

STOPSIGNAL SIGTERM

CMD ["nginx", "-g", "daemon off;"]

# NGINX Docker image setup complete, everything below is specific for
# the S3 Gateway use case.

COPY plus/etc/nginx /etc/nginx
COPY common/etc /etc
COPY common/docker-entrypoint.d/00-check-for-required-env.sh /docker-entrypoint.d/00-check-for-required-env.sh

RUN set -eux \
    export DEBIAN_FRONTEND=noninteractive; \
    mkdir -p /var/cache/nginx/s3_proxy; \
    chown nginx:nginx /var/cache/nginx/s3_proxy; \
    chmod -R +x /docker-entrypoint.d/*