mirror of
https://github.com/aarmea/fahrengit-451.git
synced 2026-03-22 00:54:19 +00:00
61 lines
2.2 KiB
Docker
61 lines
2.2 KiB
Docker
# Build nginx with the ngx_http_geoip2_module baked in.
|
|
# The official nginx image ships without GeoIP2 support; we compile the
|
|
# dynamic module against the same nginx version used in the base image.
|
|
|
|
ARG NGINX_VERSION=1.27.4
|
|
|
|
FROM nginx:${NGINX_VERSION}-alpine AS builder
|
|
|
|
ARG NGINX_VERSION
|
|
|
|
RUN apk add --no-cache \
|
|
build-base \
|
|
git \
|
|
libmaxminddb-dev \
|
|
pcre2-dev \
|
|
openssl-dev \
|
|
zlib-dev \
|
|
linux-headers
|
|
|
|
# Clone the GeoIP2 nginx module at the tag matching the installed nginx
|
|
RUN git clone --depth 1 \
|
|
https://github.com/leev/ngx_http_geoip2_module.git \
|
|
/usr/src/ngx_http_geoip2_module
|
|
|
|
# Fetch the nginx source matching the base image version
|
|
RUN wget -q "http://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz" \
|
|
-O /usr/src/nginx.tar.gz \
|
|
&& tar -xzf /usr/src/nginx.tar.gz -C /usr/src
|
|
|
|
WORKDIR /usr/src/nginx-${NGINX_VERSION}
|
|
|
|
# Build only the dynamic module (configure flags from `nginx -V`)
|
|
RUN eval $(nginx -V 2>&1 | grep 'configure arguments:' | sed 's/configure arguments://') && \
|
|
./configure \
|
|
$configure_args \
|
|
--add-dynamic-module=/usr/src/ngx_http_geoip2_module \
|
|
&& make modules
|
|
|
|
# ── Runtime image ─────────────────────────────────────────────────────────────
|
|
FROM nginx:${NGINX_VERSION}-alpine
|
|
|
|
# Runtime dependency for MaxMind DB
|
|
RUN apk add --no-cache libmaxminddb
|
|
|
|
# Copy the compiled dynamic module
|
|
COPY --from=builder \
|
|
/usr/src/nginx-${NGINX_VERSION}/objs/ngx_http_geoip2_module.so \
|
|
/usr/lib/nginx/modules/ngx_http_geoip2_module.so
|
|
|
|
# Main nginx config (loads the dynamic module at the top level)
|
|
COPY nginx.conf /etc/nginx/nginx.conf
|
|
|
|
# Virtual host template — the nginx Docker entrypoint runs envsubst on
|
|
# /etc/nginx/templates/*.template and writes the results to /etc/nginx/conf.d/
|
|
# automatically on container start, substituting any $VAR or ${VAR} present.
|
|
COPY templates/git.conf.template /etc/nginx/templates/git.conf.template
|
|
|
|
# GeoIP map directory (populated by geoblock_watcher at runtime)
|
|
RUN mkdir -p /etc/nginx/geoblock
|
|
|
|
EXPOSE 80 443
|