| ADD alpine-minirootfs-3.21.8-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ARG APP_VERSION=latest |
| LABEL org.opencontainers.image.version=latest |
| LABEL org.opencontainers.image.title=nginx-challenge |
| ENV APP_VERSION=latest |
| ARG NC_BIND=:8080 |
| ARG NC_DIFFICULTY_BITS=16 |
| ARG NC_COOKIE_HOURS=24 |
| ARG NC_TOKEN_SECONDS=300 |
| ARG NC_COOKIE_NAME=nc_chal |
| ARG NC_BIND_IP=true |
| ARG NC_COOKIE_SECURE=true |
| ARG NC_RATE_PER_MIN=30 |
| ARG NC_LANG=auto |
| ARG NC_GOODBOTS=true |
| ARG NC_GOODBOTS_EXTRA= |
| ARG NC_AUTOBLOCK=false |
| ARG NC_AUTOBLOCK_THRESHOLD=30 |
| ARG NC_AUTOBLOCK_WINDOW_MIN=60 |
| ARG NC_AUTOBLOCK_HOURS=24 |
| ARG NC_OFFENDERS_HOURS=24 |
| ENV NC_BIND=:8080 NC_DIFFICULTY_BITS=16 NC_COOKIE_HOURS=24 NC_TOKEN_SECONDS=300 NC_COOKIE_NAME=nc_chal NC_BIND_IP=true NC_COOKIE_SECURE=true NC_RATE_PER_MIN=30 NC_LANG=auto NC_GOODBOTS=true NC_GOODBOTS_EXTRA= NC_AUTOBLOCK=false NC_AUTOBLOCK_THRESHOLD=30 NC_AUTOBLOCK_WINDOW_MIN=60 NC_AUTOBLOCK_HOURS=24 NC_OFFENDERS_HOURS=24 |
| COPY /out/challenge /usr/local/bin/challenge # buildkit |
| RUN |17 APP_VERSION=latest NC_BIND=:8080 NC_DIFFICULTY_BITS=16 NC_COOKIE_HOURS=24 NC_TOKEN_SECONDS=300 NC_COOKIE_NAME=nc_chal NC_BIND_IP=true NC_COOKIE_SECURE=true NC_RATE_PER_MIN=30 NC_LANG=auto NC_GOODBOTS=true NC_GOODBOTS_EXTRA= NC_AUTOBLOCK=false NC_AUTOBLOCK_THRESHOLD=30 NC_AUTOBLOCK_WINDOW_MIN=60 NC_AUTOBLOCK_HOURS=24 NC_OFFENDERS_HOURS=24 /bin/sh -c adduser -D -H -u 10001 nc && mkdir /data && chown 10001 /data # buildkit |
| ENV NC_SECRET_FILE=/data/secret |
| VOLUME [/data] |
| USER 10001 |
| EXPOSE [8080/tcp] |
| HEALTHCHECK {Test:[CMD-SHELL wget -qO- "http://127.0.0.1:${NC_BIND##*:}/healthz" >/dev/null || exit 1] Interval:30s Timeout:3s StartPeriod:0s StartInterval:0s Retries:3} |
| ENTRYPOINT ["/usr/local/bin/challenge"] |