mirror of
https://github.com/aarmea/fahrengit-451.git
synced 2026-03-22 08:58:15 +00:00
67 lines
2.5 KiB
Docker
67 lines
2.5 KiB
Docker
# Build nginx with the ngx_http_geoip2_module baked in.
|
|
# The official nginx image ships without GeoIP2 support; we compile the
|
|
# dynamic module against the same nginx version used in the base image.
|
|
|
|
ARG NGINX_VERSION=1.27.4
|
|
|
|
FROM nginx:${NGINX_VERSION}-alpine AS builder
|
|
|
|
ARG NGINX_VERSION
|
|
|
|
RUN apk add --no-cache \
|
|
build-base \
|
|
git \
|
|
libmaxminddb-dev \
|
|
pcre2-dev \
|
|
openssl-dev \
|
|
zlib-dev \
|
|
linux-headers
|
|
|
|
# Clone the GeoIP2 nginx module at the tag matching the installed nginx
|
|
RUN git clone --depth 1 \
|
|
https://github.com/leev/ngx_http_geoip2_module.git \
|
|
/usr/src/ngx_http_geoip2_module
|
|
|
|
# Fetch the nginx source matching the base image version
|
|
RUN wget -q "http://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz" \
|
|
-O /usr/src/nginx.tar.gz \
|
|
&& tar -xzf /usr/src/nginx.tar.gz -C /usr/src
|
|
|
|
WORKDIR /usr/src/nginx-${NGINX_VERSION}
|
|
|
|
# Build only the dynamic module.
|
|
# nginx -V prints configure arguments to stderr; we capture them into a file
|
|
# and pass them to ./configure via xargs so the shell never tries to execute
|
|
# them as a command (which is what breaks the eval approach).
|
|
RUN nginx -V 2>&1 \
|
|
| grep 'configure arguments:' \
|
|
| sed 's/configure arguments://' \
|
|
| sed 's/ --add-dynamic-module[^ ]*//g' \
|
|
> /tmp/nginx_configure_args.txt \
|
|
&& echo "--add-dynamic-module=/usr/src/ngx_http_geoip2_module" >> /tmp/nginx_configure_args.txt \
|
|
&& xargs -a /tmp/nginx_configure_args.txt ./configure \
|
|
&& make modules
|
|
|
|
# ── Runtime image ─────────────────────────────────────────────────────────────
|
|
FROM nginx:${NGINX_VERSION}-alpine
|
|
|
|
# Runtime dependency for MaxMind DB
|
|
RUN apk add --no-cache libmaxminddb
|
|
|
|
# Copy the compiled dynamic module
|
|
COPY --from=builder \
|
|
/usr/src/nginx-${NGINX_VERSION}/objs/ngx_http_geoip2_module.so \
|
|
/usr/lib/nginx/modules/ngx_http_geoip2_module.so
|
|
|
|
# Main nginx config (loads the dynamic module at the top level)
|
|
COPY nginx.conf /etc/nginx/nginx.conf
|
|
|
|
# Virtual host template — the nginx Docker entrypoint runs envsubst on
|
|
# /etc/nginx/templates/*.template and writes the results to /etc/nginx/conf.d/
|
|
# automatically on container start, substituting any $VAR or ${VAR} present.
|
|
COPY templates/git.conf.template /etc/nginx/templates/git.conf.template
|
|
|
|
# GeoIP map directory (populated by geoblock_watcher at runtime)
|
|
RUN mkdir -p /etc/nginx/geoblock
|
|
|
|
EXPOSE 80 443
|