ARG REGISTRY_URL=git.winteraccess.id/docker
ARG ALPINE_VERSION=3.20

FROM ${REGISTRY_URL}/alpine:${ALPINE_VERSION}
LABEL maintainer="<Muhamad Aditya Prima> aprimediet@gmail.com"

WORKDIR /app

# ADD USER
RUN addgroup -g 10001 nginx && adduser -D -u 10001 -G nginx -s /bin/bash -h /app nginx

# INSTALL WGET AND REQUIRED BUILD TOOLS
RUN --mount=type=cache,target=/var/cache/apk \
    apk update && apk upgrade && apk add \
    nginx nginx-mod-http-naxsi

# COPY CONFIGURATION FILES
ADD ./etc/nginx/nginx-rootless.conf /etc/nginx/nginx.conf
ADD ./etc/nginx/naxsi_core.rules /etc/nginx/
ADD ./etc/nginx/proxy_params /etc/nginx/
ADD ./etc/nginx/ssl_params /etc/nginx/
ADD ./etc/nginx/conf.d /etc/nginx/conf.d

ADD ./app .

RUN touch /var/run/nginx.pid && chown nginx:nginx /var/run/nginx.pid
RUN chown -R nginx:nginx /var/lib/nginx

# CLEAR CACHE
RUN apk del curl && \
    rm -rf /var/cache/apk/*

# SET AS USER NODE
WORKDIR /app
USER nginx

CMD ["nginx"]

EXPOSE 80