FROM php:fpm-alpine MAINTAINER PrivateBin ENV RELEASE 1.1.1 RUN \ # Install dependencies apk add --no-cache nginx supervisor \ # Install PHP extension: opcache && docker-php-ext-install -j$(nproc) opcache \ && rm -f /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \ # Install PHP extension: gd && apk add --no-cache freetype libpng libjpeg-turbo freetype-dev libpng-dev libjpeg-turbo-dev \ && docker-php-ext-configure gd \ --with-freetype-dir=/usr/include/ \ --with-png-dir=/usr/include/ \ --with-jpeg-dir=/usr/include/ \ && docker-php-ext-install -j$(nproc) gd \ && apk del --no-cache freetype-dev libpng-dev libjpeg-turbo-dev \ # Remove (some of the) default nginx config && rm -f /etc/nginx.conf \ && rm -f /etc/nginx/conf.d/default.conf \ && rm -rf /etc/nginx/sites-* \ && rm -rf /var/log/nginx \ # Ensure nginx logs, even if the config has errors, are written to stderr && rm /var/lib/nginx/logs \ && mkdir -p /var/lib/nginx/logs \ && ln -s /dev/stderr /var/lib/nginx/logs/error.log \ # Create folder where the user hook into our default configs && mkdir -p /etc/nginx/server.d/ \ && mkdir -p /etc/nginx/location.d/ \ # Bring php-fpm configs into a more controallable state && rm /usr/local/etc/php-fpm.d/www.conf.default \ && mv /usr/local/etc/php-fpm.d/docker.conf /usr/local/etc/php-fpm.d/00-docker.conf \ && mv /usr/local/etc/php-fpm.d/www.conf /usr/local/etc/php-fpm.d/10-www.conf \ && mv /usr/local/etc/php-fpm.d/zz-docker.conf /usr/local/etc/php-fpm.d/20-docker.conf \ # Install PrivateBin && apk add --no-cache gnupg \ && export GNUPGHOME="$(mktemp -d)" \ && gpg2 --list-public-keys || /bin/true \ && curl -s https://privatebin.info/key/rugk.asc | gpg2 --import - \ && rm -rf /var/www/* \ && cd /tmp \ && curl -Ls https://github.com/PrivateBin/PrivateBin/releases/download/${RELEASE}/PrivateBin-${RELEASE}.tar.gz.asc > PrivateBin-${RELEASE}.tar.gz.asc \ && curl -Ls https://github.com/PrivateBin/PrivateBin/archive/${RELEASE}.tar.gz > PrivateBin-${RELEASE}.tar.gz \ && gpg2 --verify PrivateBin-${RELEASE}.tar.gz.asc \ && cd /var/www \ && tar -xzf /tmp/PrivateBin-${RELEASE}.tar.gz --strip 1 \ && rm *.md cfg/conf.sample.php \ && mv cfg /srv \ && mv lib /srv \ && mv tpl /srv \ && mv vendor /srv \ && mkdir -p /srv/data \ && sed -i "s#define('PATH', '');#define('PATH', '/srv/');#" index.php \ && chown -R www-data.www-data /var/www /srv/* \ && rm -rf "${GNUPGHOME}" /tmp/* \ && apk del --no-cache gnupg WORKDIR /var/www ADD etc/ /etc/ ADD usr/ /usr/ # mark dirs as volumes that need to be writable, allows running the container --read-only VOLUME /srv/data /tmp /var/tmp /run /var/log EXPOSE 80 ENTRYPOINT ["/usr/bin/supervisord","-c","/etc/supervisord.conf"]