mirror of
https://github.com/xwiki-labs/cryptpad-docker.git
synced 2024-11-14 17:35:04 +00:00
68 lines
1.9 KiB
Text
68 lines
1.9 KiB
Text
# Multistage build to reduce image size and increase security
|
|
|
|
FROM node:16-bullseye-slim AS build
|
|
|
|
# Install requirements to clone repository and install deps
|
|
RUN apt-get update \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install -yq git \
|
|
&& npm install -g bower
|
|
|
|
# Get cryptpad from repository submodule
|
|
COPY cryptpad /cryptpad
|
|
|
|
WORKDIR /cryptpad
|
|
|
|
# Install dependencies
|
|
RUN npm install --production \
|
|
&& npm install -g bower \
|
|
&& bower install --allow-root
|
|
|
|
# Create actual cryptpad image
|
|
FROM node:16-bullseye-slim
|
|
|
|
RUN set -x \
|
|
# Create users and groups for cryptpad
|
|
&& groupadd -r -g 4001 cryptpad \
|
|
&& useradd -rMs /bin/false -d /dev/null -u 4001 -g 4001 cryptpad \
|
|
\
|
|
# Install packages
|
|
&& apt-get update \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install -yq --no-install-recommends nginx supervisor openssl zlib1g \
|
|
&& rm -rf /var/lib/apt/lists/* /etc/nginx
|
|
|
|
# Copy nginx conf from official image
|
|
COPY --from=nginx:latest /etc/nginx /etc/nginx
|
|
|
|
# Change nginx user and disable server tokens
|
|
RUN sed -i -e 's@\(^user\).*[^;]@\1 www-data@' \
|
|
-e "/default_type/a \\ server_tokens off;" /etc/nginx/nginx.conf
|
|
|
|
# Copy cryptpad with installed modules
|
|
COPY --from=build --chown=cryptpad /cryptpad /cryptpad
|
|
|
|
# Copy supervisord conf file
|
|
COPY supervisord.conf /etc/supervisord.conf
|
|
|
|
# Copy docker-entrypoint.sh script
|
|
COPY docker-entrypoint.sh /docker-entrypoint.sh
|
|
|
|
# Set workdir to cryptpad
|
|
WORKDIR /cryptpad
|
|
|
|
# Create directories
|
|
RUN mkdir blob block customize data datastore \
|
|
&& chown cryptpad:cryptpad blob block customize data datastore
|
|
|
|
# Volumes for data persistence
|
|
VOLUME /cryptpad/blob \
|
|
/cryptpad/block \
|
|
/cryptpad/customize \
|
|
/cryptpad/data \
|
|
/cryptpad/datastore
|
|
|
|
# Ports
|
|
EXPOSE 80 443
|
|
|
|
ENTRYPOINT ["/bin/sh", "/docker-entrypoint.sh"]
|
|
|
|
CMD ["/usr/bin/supervisord", "-n", "-c", "/etc/supervisord.conf"]
|