util/Nginx/Dockerfile

FROM nginx:stable

LABEL com.bitwarden.product="bitwarden"

RUN apt-get update \
    && apt-get install -y --no-install-recommends \
        gosu \
        curl \
    && rm -rf /var/lib/apt/lists/*

COPY nginx.conf /etc/nginx
COPY proxy.conf /etc/nginx
COPY mime.types /etc/nginx
COPY security-headers.conf /etc/nginx
COPY security-headers-ssl.conf /etc/nginx
COPY logrotate.sh /
COPY entrypoint.sh /

EXPOSE 8080
EXPOSE 8443

RUN chmod +x /entrypoint.sh \
    && chmod +x /logrotate.sh

HEALTHCHECK CMD curl --insecure -Lfs https://localhost:8443/alive || curl -Lfs http://localhost:8080/alive || exit 1

ENTRYPOINT ["/entrypoint.sh"]
Dependency updates (#1681) * fix: util/Nginx/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277346 - https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277349 - https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277350 - https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-1569403 - https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-1569406 * fix: util/Nginx/Dockerfile-k8s to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277346 - https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277349 - https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277350 - https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-1569403 - https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-1569406 Co-authored-by: snyk-bot <snyk-bot@snyk.io> 2021-11-02 09:49:00 -07:00			`FROM nginx:stable`
docker support 2017-08-04 12:21:13 -04:00
Add a bitwarden label to docker images (#305) * Add a bitwarden label to docker images * Prefix label with reverse DNS 2018-06-09 14:17:16 +02:00			`LABEL com.bitwarden.product="bitwarden"`

goso all the things 2018-03-27 14:55:33 -04:00			`RUN apt-get update \`
			`&& apt-get install -y --no-install-recommends \`
			`gosu \`
try fixing curl install again 2019-07-26 13:21:46 -04:00			`curl \`
			`&& rm -rf /var/lib/apt/lists/*`
goso all the things 2018-03-27 14:55:33 -04:00
more config on nginx server 2017-08-23 22:13:50 -04:00			`COPY nginx.conf /etc/nginx`
			`COPY proxy.conf /etc/nginx`
			`COPY mime.types /etc/nginx`
include security headers 2018-08-31 12:55:54 -04:00			`COPY security-headers.conf /etc/nginx`
			`COPY security-headers-ssl.conf /etc/nginx`
Rotate nginx logs (#601) * Rotate nginx logs * Create logrotate.sh * Update Dockerfile * Update entrypoint.sh * Update Dockerfile * Update logrotate.sh * No reason to disable logrotate * Update logrotate.sh * Update entrypoint.sh * typo * Avoid useless output * Use gosu 2019-11-25 14:34:47 +01:00			`COPY logrotate.sh /`
Revert "running as bitwarden user" This reverts commit 19fa9bf8063f1d986b30d2c55370fcdd96febc21. 2018-03-23 22:16:57 -04:00			`COPY entrypoint.sh /`
adds EXPOSE 8080 to Dockerfile to be coherent to nginx default config (#403) * adds EXPOSE 8080 to Dockerfile to be coherent to nginx default config * adds EXPOSE 8443 to Dockerfile to be coherent to nginx default SSL config 2018-11-16 14:56:12 +01:00
			`EXPOSE 8080`
			`EXPOSE 8443`

Rotate nginx logs (#601) * Rotate nginx logs * Create logrotate.sh * Update Dockerfile * Update entrypoint.sh * Update Dockerfile * Update logrotate.sh * No reason to disable logrotate * Update logrotate.sh * Update entrypoint.sh * typo * Avoid useless output * Use gosu 2019-11-25 14:34:47 +01:00			`RUN chmod +x /entrypoint.sh \`
			`&& chmod +x /logrotate.sh`
docker as non-root 2018-03-26 11:21:03 -04:00
fix nginx healthcheck 2019-07-27 21:53:49 -04:00			`HEALTHCHECK CMD curl --insecure -Lfs https://localhost:8443/alive \|\| curl -Lfs http://localhost:8080/alive \|\| exit 1`
alive check for nginx 2019-07-26 12:43:06 -04:00
docker setup 2017-08-07 16:31:00 -04:00			`ENTRYPOINT ["/entrypoint.sh"]`