Mailu/core/nginx/Dockerfile

ARG DISTRO=alpine:3.14.2
FROM $DISTRO
# python3 shared with most images
RUN apk add --no-cache \
    python3 py3-pip git bash py3-multidict \
  && pip3 install --upgrade pip

# Shared layer between nginx, dovecot, postfix, postgresql, rspamd, unbound, rainloop, roundcube
RUN pip3 install socrate==0.2.0

# Image specific layers under this line
RUN apk add --no-cache certbot nginx nginx-mod-mail openssl curl tzdata \
 && pip3 install watchdog

COPY conf /conf
COPY static /static
COPY *.py /

RUN gzip -k9 /static/*.ico /static/*.txt; chmod a+rX -R /static

EXPOSE 80/tcp 443/tcp 110/tcp 143/tcp 465/tcp 587/tcp 993/tcp 995/tcp 25/tcp 10025/tcp 10143/tcp
VOLUME ["/certs"]
VOLUME ["/overrides"]

CMD /start.py

HEALTHCHECK CMD curl -k -f -L http://localhost/health || exit 1
Give alpine 3.14.2 a shot 2021-09-01 18:56:44 +02:00			`ARG DISTRO=alpine:3.14.2`
rebase and update for 3.10, avoid adding qemu file to x86 images 2019-08-21 18:24:30 +02:00			`FROM $DISTRO`
Standarize image by using shared / similair layers 2018-10-31 19:17:23 +02:00			`# python3 shared with most images`
			`RUN apk add --no-cache \`
Install py3-multidict from repository before installing socrate to avoid the need of gcc during build 2019-11-21 12:28:58 +02:00			`python3 py3-pip git bash py3-multidict \`
Standarize image by using shared / similair layers 2018-10-31 19:17:23 +02:00			`&& pip3 install --upgrade pip`
Use python package socrate instead of Mailustart 2019-07-25 10:33:57 +02:00
			`# Shared layer between nginx, dovecot, postfix, postgresql, rspamd, unbound, rainloop, roundcube`
Resolve HOST_* to _ADDRESS only if _ADDRESS is not already set 2019-08-23 08:43:59 +02:00			`RUN pip3 install socrate==0.2.0`
Use python package socrate instead of Mailustart 2019-07-25 10:33:57 +02:00
Standarize image by using shared / similair layers 2018-10-31 19:17:23 +02:00			`# Image specific layers under this line`
Add tzdata to core 2021-11-02 12:18:21 +02:00			`RUN apk add --no-cache certbot nginx nginx-mod-mail openssl curl tzdata \`
Use python package socrate instead of Mailustart 2019-07-25 10:33:57 +02:00			`&& pip3 install watchdog`
Use jinja2 for building nginx config 2017-09-24 13:09:12 +02:00
			`COPY conf /conf`
Implement favicon package Credit to: - https://stackoverflow.com/a/19590415/1816774 - https://realfavicongenerator.net/ 2019-01-06 15:49:40 +02:00			`COPY static /static`
Add letsencrypt support in the nginx container 2017-09-24 17:50:10 +02:00			`COPY *.py /`
Use jinja2 for building nginx config 2017-09-24 13:09:12 +02:00
Ensure that static assets are readable 2021-10-27 09:59:55 +02:00			`RUN gzip -k9 /static/.ico /static/.txt; chmod a+rX -R /static`
pre-compress assets (*.ico for now) 2021-09-02 20:46:56 +02:00
Add expose instructions in Dockerfiles, fixes #392 2018-04-21 14:46:01 +02:00			`EXPOSE 80/tcp 443/tcp 110/tcp 143/tcp 465/tcp 587/tcp 993/tcp 995/tcp 25/tcp 10025/tcp 10143/tcp`
Explicitely declare required volumes, fixes #568 2018-09-28 17:12:50 +02:00			`VOLUME ["/certs"]`
nginx: Allow extending config with overrides To facilitate this, the default redirect at / can be disabled, even if the default remains at redirecting to the webmailer. The extensions are within the host scope and are read from $ROOT/overrides/nginx/*.conf. 2018-11-27 01:12:12 +02:00			`VOLUME ["/overrides"]`
Add expose instructions in Dockerfiles, fixes #392 2018-04-21 14:46:01 +02:00
Prepare nginx as a unique frontend 2017-09-24 14:01:03 +02:00			`CMD /start.py`
add healthcheck for http services 2018-10-16 21:38:12 +02:00
Fix front health checking - Specified seperated /health path in order to allow for healthcheck even if webmail and admin are not seletectd. This also allows healthchecking fom external services like DNS load balancers; - Make curl not to fail on TLS because localhost is not included in the certificates. 2018-10-21 19:45:41 +02:00			`HEALTHCHECK CMD curl -k -f -L http://localhost/health \|\| exit 1`