Skip to content

Instantly share code, notes, and snippets.

@moloch--
Created August 14, 2017 22:04
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save moloch--/fedde5dbf466a6faf2f288d04d6680d0 to your computer and use it in GitHub Desktop.
Save moloch--/fedde5dbf466a6faf2f288d04d6680d0 to your computer and use it in GitHub Desktop.
#
# Dockerfile for Nginx/Http2
# v0.0.2 - By Moloch
#
FROM buildpack-deps:jessie
MAINTAINER moloch
ENV DEBIAN_FRONTEND noninteractive
ENV NGINX_VER 1.13.4
ENV NPM_CONFIG_LOGLEVEL info
ENV NODE_VERSION 8.3.0
#
# > Install/Compile Nginx
#
RUN apt-get clean \
&& apt-get update --fix-missing \
&& apt-get install --fix-missing -y build-essential zlib1g-dev libpcre3 libpcre3-dev openssl libssl-dev libperl-dev wget ca-certificates logrotate libgeoip-dev git
RUN (wget -O - https://nginx.org/download/nginx-${NGINX_VER}.tar.gz | tar zxf - -C /tmp) \
&& cd /tmp/nginx-${NGINX_VER} \
&& ./configure --prefix=/etc/nginx/ --sbin-path=/usr/sbin/nginx \
--with-cc-opt='-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2' \
--with-http_ssl_module \
--with-http_realip_module \
--with-http_addition_module \
--with-http_sub_module \
--with-http_gunzip_module \
--with-http_gzip_static_module \
--with-http_random_index_module \
--with-http_secure_link_module \
--with-http_stub_status_module \
--with-http_v2_module \
--with-http_geoip_module \
#--with-mail \
#--with-mail_ssl_module \
--with-file-aio \
--with-ipv6 \
&& make install
#
# > Install Node
#
RUN groupadd --gid 1000 node \
&& useradd --uid 1000 --gid node --shell /bin/bash --create-home node
# gpg keys listed at https://github.com/nodejs/node
RUN set -ex \
&& for key in \
9554F04D7259F04124DE6B476D5A82AC7E37093B \
94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
0034A06D9D9B0064CE8ADF6BF1747F4AD2306D93 \
FD3A5288F042B6850C66B31F09FE44734EB7990E \
71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
B9AE9905FFD7803F25714661B63B535A4C206CA9 \
C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
; do \
gpg --keyserver pgp.mit.edu --recv-keys "$key"; \
done
RUN curl -SLO "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-x64.tar.xz" \
&& curl -SLO "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" \
&& gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \
&& grep " node-v$NODE_VERSION-linux-x64.tar.xz\$" SHASUMS256.txt | sha256sum -c - \
&& tar -xJf "node-v$NODE_VERSION-linux-x64.tar.xz" -C /usr/local --strip-components=1 \
&& rm "node-v$NODE_VERSION-linux-x64.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
&& ln -s /usr/local/bin/node /usr/local/bin/nodejs
#
# > Install build tools
#
RUN node --version && npm --version
RUN npm install -g @angular/cli
#
# > Clean Up
#
RUN rm -Rf /tmp/* \
&& apt-get purge -yqq wget build-essential \
&& apt-get autoremove -yqq \
&& apt-get clean
#
# > Make Nginx Directories
#
RUN mkdir /etc/nginx/tls \
&& mkdir /var/log/nginx
#
# > Expose Ports
#
EXPOSE 80 443
CMD ["nginx", "-g", "daemon off;"]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment