init docker files
This commit is contained in:
Thomas Boksberger committed
1 parent
9a17cf34f5
commit
2d41540111
6 files changed
+502
-25
No files matched your search
+75
@@ -0,0 +1,75 @@
|
||||
FROM ubuntu:20.04
|
||||
MAINTAINER ich@boxi.ch
|
||||
|
||||
LABEL name="Apache HTTPD Reverse-Proxy with OpenID Connect Authentication support based on Ubuntu 20.04"
|
||||
|
||||
ARG DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
RUN apt-get update && \
|
||||
apt-get install -y --no-install-recommends \
|
||||
apache2 curl wget \
|
||||
ca-certificates \
|
||||
libjansson4 \
|
||||
libapache2-mod-auth-openidc \
|
||||
vim apt-utils && \
|
||||
rm -rf /var/lib/apt/lists/* && \
|
||||
a2enmod auth_openidc && \
|
||||
a2enmod headers && \
|
||||
a2enmod proxy && \
|
||||
a2enmod proxy_http && \
|
||||
a2enmod rewrite && \
|
||||
a2enmod ssl && \
|
||||
a2enmod env && \
|
||||
a2enmod mime && \
|
||||
a2enmod proxy_wstunnel && \
|
||||
a2enmod negotiation
|
||||
|
||||
ADD apache2.conf /etc/apache2/apache2.conf
|
||||
|
||||
ENV APACHE_RUN_GROUP www-data
|
||||
ENV APACHE_RUN_USER www-data
|
||||
ENV APACHE_RUN_DIR /var/run/apache2
|
||||
ENV APACHE_PID_FILE /var/run/apache2/pid
|
||||
ENV APACHE_LOG_DIR /var/log/apache2
|
||||
|
||||
# set to debug to debug apache oid problems
|
||||
# BE AWARE: loglevel debug will log all tokens and MUST NEVER be used in production
|
||||
ENV APACHE_DEBUG_LEVEL warn
|
||||
|
||||
# add and configure default ssl certs
|
||||
#ADD apache.crt /etc/ssl/certs/ssl.crt
|
||||
#ADD apache.key /etc/ssl/private/ssl.key
|
||||
#ENV SSL_CERTIFICATE_FILE "/etc/ssl/certs/ssl.crt"
|
||||
#ENV SSL_CERTIFICATE_KEY_FILE "/etc/ssl/private/ssl.key"
|
||||
|
||||
ENV SERVER_NAME "localhost"
|
||||
|
||||
ENV KC_ADDR "http://kubernetes.docker.internal:8081"
|
||||
ENV KC_REALM "boxit"
|
||||
ENV OIDC_CLIENT_ID "c7300da4-df95-412d-8fc7-0759ac4e781c"
|
||||
ENV OIDC_CLIENT_SECRET 'e08f6a4d-e2f0-4929-a85f-29c817a17168'
|
||||
ENV OIDC_AUDIENCE "audience=https%3A%2F%2Fdev.7mal8.ch%2F"
|
||||
ENV OIDC_SCOPE "openid name email"
|
||||
ENV OIDC_REDIRECT_URI "http://localhost/openidc"
|
||||
ENV OIDC_CRYPTO_PASSPHRASE 'some_random_secret_4321'
|
||||
ENV OIDC_INFO_HOOK "iat access_token access_token_expires id_token userinfo"
|
||||
ENV OIDC_PROVIDER_URL "http://id.boxi.ch"
|
||||
ENV OIDC_PROVIDER_ENDSESSION_ENDPOINT "/v2/logout"
|
||||
ENV OIDC_RETURN_TO "http://localhost/openidc?logout=get"
|
||||
|
||||
RUN mkdir -p /var/run/apache2 /var/www/html/app && \
|
||||
mkdir -p /config/global.d && \
|
||||
mkdir -p /config/vhost-80.d && \
|
||||
mkdir -p /config/vhost-443.d && \
|
||||
chmod -R 755 /var/www/html/app && \
|
||||
chown -R www-data /var/run/apache2 /var/log/apache2 /var/www/html/app && \
|
||||
rm /etc/apache2/sites-enabled/000-default.conf
|
||||
|
||||
ADD index.html /var/www/html/app
|
||||
# https://httpd.apache.org/docs/2.4/stopping.html#gracefulstop
|
||||
STOPSIGNAL WINCH
|
||||
|
||||
COPY httpd-foreground /usr/local/bin/
|
||||
|
||||
EXPOSE 80
|
||||
CMD ["httpd-foreground"]
|
||||