FROM amd64/nginx:stable-alpine

COPY nginx-keys/ /tmp/nginx-keys

COPY compile.sh /tmp/compile.sh

RUN chmod +x /tmp/compile.sh && \

/tmp/compile.sh && \

rm -rf /tmp/*

COPY entrypoint/ /opt/entrypoint

COPY confs/ /opt/confs

COPY scripts/ /opt/scripts

COPY fail2ban/ /opt/fail2ban

COPY logs/ /opt/logs

COPY lua/ /opt/lua

COPY prepare.sh /tmp/prepare.sh

RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh

# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971

RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0" "libssl1.1>1.1.1g-r0"

VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache

EXPOSE 8080/tcp 8443/tcp

ENTRYPOINT ["/opt/entrypoint/entrypoint.sh"]