Mailu/core/nginx/Dockerfile

FROM alpine:3.8
# python3 shared with most images
RUN apk add --no-cache \
    python3 py3-pip \
  && pip3 install --upgrade pip
# Shared layer between rspamd, postfix, dovecot, unbound and nginx
RUN pip3 install jinja2
# Image specific layers under this line
RUN apk add --no-cache certbot nginx nginx-mod-mail openssl curl \
 && pip3 install idna requests watchdog

COPY conf /conf
COPY *.py /

EXPOSE 80/tcp 443/tcp 110/tcp 143/tcp 465/tcp 587/tcp 993/tcp 995/tcp 25/tcp 10025/tcp 10143/tcp
VOLUME ["/certs"]
VOLUME ["/overrides"]

CMD /start.py

HEALTHCHECK CMD curl -k -f -L http://localhost/health || exit 1
Move to Alpine:3.8 and fixing #522 2018-10-11 13:06:26 +02:00			`FROM alpine:3.8`
Standarize image by using shared / similair layers 2018-10-31 19:17:23 +02:00			`# python3 shared with most images`
			`RUN apk add --no-cache \`
			`python3 py3-pip \`
			`&& pip3 install --upgrade pip`
			`# Shared layer between rspamd, postfix, dovecot, unbound and nginx`
			`RUN pip3 install jinja2`
			`# Image specific layers under this line`
add healthcheck for http services 2018-10-16 21:38:12 +02:00			`RUN apk add --no-cache certbot nginx nginx-mod-mail openssl curl \`
Add certificate watcher for external certs to reload nginx In case of TLS_FLAVOR=[mail,cert], the user supplies their own certificates. However, since nginx is not aware of changes to these files, it cannot reload itself e.g. when the certs get renewed. To solve this, let’s add a small daemon in the place of `letsencrypt.py`, which uses a flexible file-watching framework and reloads nginx in the case the certificates change …. 2018-12-06 17:48:26 +02:00			`&& pip3 install idna requests watchdog`
Use jinja2 for building nginx config 2017-09-24 13:09:12 +02:00
			`COPY conf /conf`
Add letsencrypt support in the nginx container 2017-09-24 17:50:10 +02:00			`COPY *.py /`
Use jinja2 for building nginx config 2017-09-24 13:09:12 +02:00
Add expose instructions in Dockerfiles, fixes #392 2018-04-21 14:46:01 +02:00			`EXPOSE 80/tcp 443/tcp 110/tcp 143/tcp 465/tcp 587/tcp 993/tcp 995/tcp 25/tcp 10025/tcp 10143/tcp`
Explicitely declare required volumes, fixes #568 2018-09-28 17:12:50 +02:00			`VOLUME ["/certs"]`
nginx: Allow extending config with overrides To facilitate this, the default redirect at / can be disabled, even if the default remains at redirecting to the webmailer. The extensions are within the host scope and are read from $ROOT/overrides/nginx/*.conf. 2018-11-27 01:12:12 +02:00			`VOLUME ["/overrides"]`
Add expose instructions in Dockerfiles, fixes #392 2018-04-21 14:46:01 +02:00
Prepare nginx as a unique frontend 2017-09-24 14:01:03 +02:00			`CMD /start.py`
add healthcheck for http services 2018-10-16 21:38:12 +02:00
Fix front health checking - Specified seperated /health path in order to allow for healthcheck even if webmail and admin are not seletectd. This also allows healthchecking fom external services like DNS load balancers; - Make curl not to fail on TLS because localhost is not included in the certificates. 2018-10-21 19:45:41 +02:00			`HEALTHCHECK CMD curl -k -f -L http://localhost/health \|\| exit 1`