0e213d8549
* chore: update Dockerfile to run it as non-root user across multiple apps and install shadow-utils * chore: update Dockerfiles to install shadow-utils using dnf and ensure non-root user execution in admin, web, and live apps * chore: add Dockerfile configurations for Node Runner and Flux, including shadow-utils installation and non-root user execution * chore: update Dockerfile.fips to set permissions for /app and /var/tls, and expose port 8000 * chore: update Dockerfiles to install crypto-policies and set FIPS mode across multiple applications * chore: replace microdnf with dnf for installing crypto-policies in Dockerfiles for admin and web applications * chore: update Dockerfiles to set up Nginx directories and rebuild sharp for UBI compatibility in admin, live, and web applications * chore: update Dockerfiles to include /run directory for Nginx and adjust ownership settings in admin, live, and web applications * chore: refactor Dockerfile.fips to use node:22-alpine, streamline dependency installation, and adjust working directory structure for the live application * chore: update Dockerfile.fips to use UBI base image, streamline dependency installation, and enhance runtime configuration for the live application * fix: exclude src/scripts from tsc to resolve missing @hocuspocus/provider types * feat: add FIPS Docker image variables for Node Runner and Flux * fix: update TURBO_VERSION to 2.8.13 and clean up Dockerfile --------- Co-authored-by: Palanikannan M <[email protected]>
32 lines
883 B
Docker
32 lines
883 B
Docker
FROM caddy:2.10.0-builder-alpine AS caddy-builder
|
|
|
|
RUN xcaddy build \
|
|
--with github.com/caddy-dns/[email protected] \
|
|
--with github.com/caddy-dns/digitalocean@04bde2867106aa1b44c2f9da41a285fa02e629c5 \
|
|
--with github.com/mholt/caddy-l4@4d3c80e89c5f80438a3e048a410d5543ff5fb9f4
|
|
|
|
FROM registry.access.redhat.com/ubi10/ubi-minimal
|
|
|
|
RUN microdnf install -y \
|
|
ca-certificates \
|
|
curl \
|
|
bash \
|
|
nss \
|
|
crypto-policies \
|
|
crypto-policies-scripts \
|
|
&& microdnf clean all
|
|
|
|
RUN update-crypto-policies --set FIPS
|
|
|
|
COPY --from=caddy-builder /usr/bin/caddy /usr/bin/caddy
|
|
COPY Caddyfile.ee /etc/caddy/Caddyfile
|
|
|
|
COPY LICENSE.txt .
|
|
RUN mkdir -p /usr/share/licenses/plane/
|
|
COPY LICENSE.txt /usr/share/licenses/plane/LICENSE.txt
|
|
|
|
WORKDIR /srv
|
|
EXPOSE 80 443
|
|
|
|
ENTRYPOINT ["caddy"]
|
|
CMD ["run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"] |