150 lines
3.5 KiB
Docker
Executable File
150 lines
3.5 KiB
Docker
Executable File
FROM lsiobase/nginx:arm64v8-3.12
|
|
|
|
# set version label
|
|
ARG BUILD_DATE
|
|
ARG VERSION
|
|
ARG CERTBOT_VERSION
|
|
LABEL build_version="Linuxserver.io version:- ${VERSION} Build-date:- ${BUILD_DATE}"
|
|
LABEL maintainer="aptalca"
|
|
|
|
# environment settings
|
|
ENV DHLEVEL=2048 ONLY_SUBDOMAINS=false AWS_CONFIG_FILE=/config/dns-conf/route53.ini
|
|
ENV S6_BEHAVIOUR_IF_STAGE2_FAILS=2
|
|
|
|
RUN \
|
|
echo "**** install build packages ****" && \
|
|
apk add --no-cache --virtual=build-dependencies \
|
|
g++ \
|
|
gcc \
|
|
libffi-dev \
|
|
openssl-dev \
|
|
python3-dev && \
|
|
echo "**** install runtime packages ****" && \
|
|
apk add --no-cache --upgrade \
|
|
curl \
|
|
fail2ban \
|
|
gnupg \
|
|
memcached \
|
|
nginx \
|
|
nginx-mod-http-echo \
|
|
nginx-mod-http-fancyindex \
|
|
nginx-mod-http-geoip2 \
|
|
nginx-mod-http-headers-more \
|
|
nginx-mod-http-image-filter \
|
|
nginx-mod-http-lua \
|
|
nginx-mod-http-lua-upstream \
|
|
nginx-mod-http-nchan \
|
|
nginx-mod-http-perl \
|
|
nginx-mod-http-redis2 \
|
|
nginx-mod-http-set-misc \
|
|
nginx-mod-http-upload-progress \
|
|
nginx-mod-http-xslt-filter \
|
|
nginx-mod-mail \
|
|
nginx-mod-rtmp \
|
|
nginx-mod-stream \
|
|
nginx-mod-stream-geoip2 \
|
|
nginx-vim \
|
|
php7-bcmath \
|
|
php7-bz2 \
|
|
php7-ctype \
|
|
php7-curl \
|
|
php7-dom \
|
|
php7-exif \
|
|
php7-ftp \
|
|
php7-gd \
|
|
php7-iconv \
|
|
php7-imap \
|
|
php7-intl \
|
|
php7-ldap \
|
|
php7-mcrypt \
|
|
php7-memcached \
|
|
php7-mysqli \
|
|
php7-mysqlnd \
|
|
php7-opcache \
|
|
php7-pdo_mysql \
|
|
php7-pdo_odbc \
|
|
php7-pdo_pgsql \
|
|
php7-pdo_sqlite \
|
|
php7-pear \
|
|
php7-pecl-apcu \
|
|
php7-pecl-redis \
|
|
php7-pgsql \
|
|
php7-phar \
|
|
php7-posix \
|
|
php7-soap \
|
|
php7-sockets \
|
|
php7-sodium \
|
|
php7-sqlite3 \
|
|
php7-tokenizer \
|
|
php7-xml \
|
|
php7-xmlreader \
|
|
php7-xmlrpc \
|
|
php7-zip \
|
|
py3-cryptography \
|
|
py3-future \
|
|
py3-pip \
|
|
whois && \
|
|
echo "**** install certbot plugins ****" && \
|
|
if [ -z ${CERTBOT_VERSION+x} ]; then \
|
|
CERTBOT="certbot"; \
|
|
else \
|
|
CERTBOT="certbot==${CERTBOT_VERSION}"; \
|
|
fi && \
|
|
pip3 install -U \
|
|
pip && \
|
|
pip3 install -U \
|
|
${CERTBOT} \
|
|
certbot-dns-aliyun \
|
|
certbot-dns-cloudflare \
|
|
certbot-dns-cloudxns \
|
|
certbot-dns-cpanel \
|
|
certbot-dns-digitalocean \
|
|
certbot-dns-dnsimple \
|
|
certbot-dns-dnsmadeeasy \
|
|
certbot-dns-domeneshop \
|
|
certbot-dns-google \
|
|
certbot-dns-inwx \
|
|
certbot-dns-linode \
|
|
certbot-dns-luadns \
|
|
certbot-dns-nsone \
|
|
certbot-dns-ovh \
|
|
certbot-dns-rfc2136 \
|
|
certbot-dns-route53 \
|
|
certbot-dns-transip \
|
|
certbot-plugin-gandi \
|
|
cryptography \
|
|
requests && \
|
|
echo "**** remove unnecessary fail2ban filters ****" && \
|
|
rm \
|
|
/etc/fail2ban/jail.d/alpine-ssh.conf && \
|
|
echo "**** copy fail2ban default action and filter to /default ****" && \
|
|
mkdir -p /defaults/fail2ban && \
|
|
mv /etc/fail2ban/action.d /defaults/fail2ban/ && \
|
|
mv /etc/fail2ban/filter.d /defaults/fail2ban/ && \
|
|
echo "**** copy proxy confs to /default ****" && \
|
|
mkdir -p /defaults/proxy-confs && \
|
|
curl -o \
|
|
/tmp/proxy.tar.gz -L \
|
|
"https://github.com/linuxserver/reverse-proxy-confs/tarball/master" && \
|
|
tar xf \
|
|
/tmp/proxy.tar.gz -C \
|
|
/defaults/proxy-confs --strip-components=1 --exclude=linux*/.gitattributes --exclude=linux*/.github --exclude=linux*/.gitignore --exclude=linux*/LICENSE && \
|
|
echo "**** configure nginx ****" && \
|
|
rm -f /etc/nginx/conf.d/default.conf && \
|
|
curl -o \
|
|
/defaults/dhparams.pem -L \
|
|
"https://lsio.ams3.digitaloceanspaces.com/dhparams.pem" && \
|
|
echo "**** cleanup ****" && \
|
|
apk del --purge \
|
|
build-dependencies && \
|
|
for cleanfiles in *.pyc *.pyo; \
|
|
do \
|
|
find /usr/lib/python3.* -iname "${cleanfiles}" -exec rm -f '{}' + \
|
|
; done && \
|
|
rm -rf \
|
|
/tmp/* \
|
|
/root/.cache
|
|
|
|
# add local files
|
|
COPY root/ /
|