6318f4b4ad
* 🔒 chore(security): improve container image security * 👌 chore(review): add cron job to Dockerfile for periodic tasks
64 lines
1.4 KiB
Docker
64 lines
1.4 KiB
Docker
FROM curlimages/curl:8.18.0 AS download-env
|
|
|
|
# renovate: datasource=github-releases depName=stunnel/static-curl packageName=stunnel/static-curl
|
|
ENV CURL_VERSION=8.18.0
|
|
|
|
RUN set -eux ; \
|
|
ARCHITECTURE="$(uname -m)" ; \
|
|
case $ARCHITECTURE in \
|
|
x86_64) ARCHITECTURE="x86_64" ;; \
|
|
aarch64 | armv8* | arm64) ARCHITECTURE="aarch64" ;; \
|
|
*) \
|
|
echo "(!) Architecture $ARCHITECTURE unsupported" ; \
|
|
exit 1 \
|
|
;; \
|
|
esac ; \
|
|
curl \
|
|
--connect-timeout 10 \
|
|
--fail \
|
|
--location \
|
|
--max-time 300 \
|
|
--output /tmp/curl.tar.xz \
|
|
--proto '=https' \
|
|
--show-error \
|
|
--silent \
|
|
--tlsv1.2 \
|
|
"https://github.com/stunnel/static-curl/releases/download/${CURL_VERSION}/curl-linux-${ARCHITECTURE}-glibc-${CURL_VERSION}.tar.xz" \
|
|
; \
|
|
tar -xJf /tmp/curl.tar.xz -C /tmp ; \
|
|
chmod +x /tmp/curl ;
|
|
|
|
FROM node:22-alpine AS build-env
|
|
|
|
WORKDIR /app
|
|
|
|
COPY ["package.json", "package-lock.json*", "./"]
|
|
|
|
RUN npm ci
|
|
|
|
COPY . .
|
|
|
|
RUN npm run build
|
|
|
|
FROM node:22-alpine
|
|
|
|
WORKDIR /app/uploads
|
|
WORKDIR /app
|
|
|
|
COPY --from=download-env /tmp/curl /curl
|
|
COPY --from=build-env /app /app
|
|
COPY ./cron.sh /etc/periodic/15min/cron
|
|
RUN chmod +x /etc/periodic/15min/cron
|
|
|
|
CMD crond && node build
|
|
|
|
EXPOSE 3000
|
|
|
|
ENV \
|
|
MEILI_URL=http://127.0.0.1:7700 \
|
|
PUBLIC_DISABLE_SIGNUP=false \
|
|
PUBLIC_OVERPASS_API_URL= \
|
|
PUBLIC_POCKETBASE_URL=http://127.0.0.1:8090 \
|
|
UPLOAD_PASSWORD= \
|
|
UPLOAD_USER=
|