summaryrefslogtreecommitdiffstats
path: root/Dockerfile_nginx
diff options
context:
space:
mode:
authorMatthew Lemon <y@yulqen.org>2024-04-29 16:17:46 +0100
committerMatthew Lemon <y@yulqen.org>2024-04-29 16:17:46 +0100
commit63246f793907b42867bac93d304231d091b428ba (patch)
tree701cf3e626655033025f0f279ea59f0d92b90adc /Dockerfile_nginx
parent2f8290c497bc9f1198780c76e224c21acf79eb35 (diff)
Adding the template app nginx config
Diffstat (limited to '')
-rw-r--r--Dockerfile_nginx23
1 files changed, 23 insertions, 0 deletions
diff --git a/Dockerfile_nginx b/Dockerfile_nginx
new file mode 100644
index 0000000..80030af
--- /dev/null
+++ b/Dockerfile_nginx
@@ -0,0 +1,23 @@
+
+FROM registry.access.redhat.com/ubi9/nginx-122:1-17
+
+# Switch to Root to update
+USER 0
+
+# Uninstalling BIND to avoid CVE-2023-2828, CVE-2023-2828 & CVE-2023-2828
+# NGINX shouldn't need BIND, unless it's specfically doing DNS related things (famous last words)
+RUN rpm -e bind-license-9.16.23-11.el9.noarch bind-libs-9.16.23-11.el9.x86_64 bind-utils-9.16.23-11.el9.x86_64
+
+# Switch back the default user
+USER 1001
+
+# Copy your Nginx configuration file
+COPY nginx-conf/nginx.conf "${NGINX_CONF_PATH}"
+
+COPY nginx-conf/nginx.conf "${NGINX_CONF_PATH}"
+COPY nginx-conf/logging.conf /opt/app-root/etc/nginx.d/logging.conf
+# COPY nginx-conf/nginx-default-cfg/*.conf "${NGINX_DEFAULT_CONF_PATH}"
+# COPY nginx-conf/nginx-cfg/*.conf "${NGINX_CONFIGURATION_PATH}"
+
+# Run script uses standard ways to run the application
+CMD nginx -g "daemon off;"