From d113da50d99c549f81edef466ac324c7004e4898 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adrian=20N=C3=B6thlich?= <git@promasu.tech>
Date: Thu, 5 Mar 2020 01:48:53 +0100
Subject: [PATCH] Add Dockerfile
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Adrian Nöthlich <git@promasu.tech>
---
 Dockerfile | 49 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 Dockerfile

diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..bd5b6bb
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,49 @@
+# Multistage build to reduce image size and increase security
+FROM node:12-stretch-slim AS build
+
+# Install requirements to clone repository and install deps
+RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -yq git
+RUN npm install -g bower
+
+# Allow to create docker image from different repository or branch
+ARG REPO=https://github.com/xwiki-labs/cryptpad.git
+ARG BRANCH=master
+
+# Create folder for cryptpad
+RUN mkdir /cryptpad
+WORKDIR /cryptpad
+
+# Get cryptpad from upstream
+RUN git clone --depth 1 --branch ${BRANCH} --single-branch ${REPO} .\
+    && rm -rf .git
+
+# Install dependencies
+RUN npm install --production \
+    && npm install -g bower \
+    && bower install --allow-root
+
+# Create actual cryptpad image
+FROM node:12-stretch-slim
+
+# Create user and group for cryptpad so it does not run as root
+RUN groupadd cryptpad -g 4001
+RUN useradd cryptpad -u 4001 -g 4001 -d /cryptpad
+
+# Copy cryptpad with installed modules
+COPY --from=build --chown=cryptpad /cryptpad /cryptpad
+USER cryptpad
+
+# Create directory for data
+RUN mkdir /cryptpad/data
+
+# Copy customizations into the container
+COPY --chown=cryptpad customize /cryptpad/customize
+
+# Set workdir to cryptpad
+WORKDIR /cryptpad
+
+# Port
+EXPOSE 3000
+
+# Run cryptpad on startup
+CMD ["server.js"]