creProxy/Dockerfile20 at main · creDocker/creProxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
#
# Nginx Proxy Dockerfile
#
# https://github.com/tamboraorg/docker/creProxy
# (adapted from https://github.com/jwilder/nginx-proxy )

FROM credocker/crenginx:2020.0
MAINTAINER Michael Kahle <michael.kahle@yahoo.de>

ARG BUILD_YEAR=2020
ARG BUILD_MONTH=0
ARG BUILD_TAG=2020.0

ENV CERTBOT_VERSION 0.40.0

LABEL Name="Proxy for CRE" \
      CRE=$CRE_VERSION \
      Year=$BUILD_YEAR \
      Month=$BUILD_MONTH \
      Version=$CERTBOT_VERSION \
      OS="Ubuntu:$UBUNTU_VERSION" \
      Build_=$BUILD_TAG

# Fix issue due to server_names_hash_bucket_size
# see also proxy.tmpl -  https://github.com/certbot/certbot/issues/5199
RUN sed -i 's/# server_names_hash_bucket_size 64/server_names_hash_bucket_size 128/' /etc/nginx/nginx.conf && \
    sed -i 's/# server_names_hash_bucket_size/server_names_hash_bucket_size/' /etc/nginx/nginx.conf

RUN apt-get update; apt-get install -y python3-certbot-nginx certbot
RUN apt-get install -y fail2ban

RUN mkdir -p /cre && touch /cre/versions.txt && \
    echo "$(date +'%F %R') \t creProxy \t " >> /cre/versions.txt && \
    echo "$(date +'%F %R') \t  $(certbot --noninteractive --version 2>&1)" >> /cre/versions.txt && \
    echo "$(date +'%F %R') \t  fail2ban-server $(fail2ban-server -b -x -q start > /dev/null; fail2ban-server -V)" >> /cre/versions.txt
##    ##echo "$(date +'%F %R') \t  fail2ban-client $(fail2ban-client version 2>&1)" >> /cre/versions.txt


COPY cre/proxy.conf /etc/nginx/conf.d/default.conf
COPY cre /cre
WORKDIR /cre/

#VOLUME ["/etc/nginx/certs", "/etc/nginx/dhparam"]

ENTRYPOINT ["/cre/proxy-entrypoint.sh"]
CMD ["shoreman", "/cre/proxy-procfile"]


# Expose ports.
EXPOSE 80
EXPOSE 443