Dockerfile

ARG nginx_version=stable
FROM nginx:${nginx_version} AS build

SHELL ["/bin/bash", "-c"]

RUN set -x \
    && apt-get update \
    && apt-get install -y --no-install-suggests \
    libluajit-5.1-dev libpam0g-dev zlib1g-dev libpcre3-dev libpcre2-dev \
    libexpat1-dev git curl build-essential lsb-release libxml2 libxslt1.1 libxslt1-dev autoconf libtool libssl-dev \
    unzip libmaxminddb-dev libbrotli-dev cmake pkg-config libjansson-dev libmsgpack-dev

RUN git clone https://github.com/benmcollins/libjwt.git /home/libjwt && \
    cd /home/libjwt && \
    git checkout 8ac4200

RUN mkdir -p /home/libjwt/build && \
    cd /home/libjwt/build && \
    cmake .. && make && make install

ARG openresty_package_version=1.27.1.1-1~bookworm1
RUN set -x \
    && curl -fsSL https://openresty.org/package/pubkey.gpg | apt-key add - \
    && echo "deb https://openresty.org/package/$(uname -m | grep -qE 'aarch64|arm64' && echo -n 'arm64/')debian $(lsb_release -sc) openresty" | tee -a /etc/apt/sources.list.d/openresty.list \
    && apt-get update \
    && apt-get install -y --no-install-suggests openresty=${openresty_package_version} \
    && cd /usr/local/openresty \
    && cp -vr ./luajit/* /usr/local/ \
    && rm -d /usr/local/share/lua/5.1 \
    && ln -sf /usr/local/lib/lua/5.1 /usr/local/share/lua/ \
    && cp -vr ./lualib/* /usr/local/lib/lua/5.1

ENV LUAJIT_LIB=/usr/local/lib \
    LUAJIT_INC=/usr/local/include/luajit-2.1

ARG modules
RUN set -x \
    && nginx_version=$(echo ${NGINX_VERSION} | sed 's/-.*//g') \
    && curl -fSL "https://nginx.org/download/nginx-${nginx_version}.tar.gz" \
    |  tar -C /usr/local/src -xzvf- \
    && ln -s /usr/local/src/nginx-${nginx_version} /usr/local/src/nginx \
    && cd /usr/local/src/nginx \
    && configure_args=$(nginx -V 2>&1 | grep "configure arguments:" | awk -F 'configure arguments:' '{print $2}'); \
    IFS=','; \
    for module in ${modules}; do \
    module_repo=$(echo $module | sed -E 's@^(((https?|git)://)?[^:]+).*@\1@g'); \
    module_tag=$(echo $module | sed -E 's@^(((https?|git)://)?[^:]+):?([^:/]*)@\4@g'); \
    dirname=$(echo "${module_repo}" | sed -E 's@^.*/|\..*$@@g'); \
    git clone --recursive "${module_repo}"; \
    cd ${dirname}; \
    git fetch --tags; \
    if [ -n "${module_tag}" ]; then \
    if [[ "${module_tag}" =~ ^(pr-[0-9]+.*)$ ]]; then \
    pr_numbers="${BASH_REMATCH[1]//pr-/}"; \
    IFS=';'; \
    for pr_number in ${pr_numbers}; do \
    git fetch origin "pull/${pr_number}/head:pr-${pr_number}"; \
    git merge --no-commit pr-${pr_number} master; \
    done; \
    IFS=','; \
    else \
    git checkout "${module_tag}"; \
    fi; \
    fi; \
    cd ..; \
    configure_args="${configure_args} --add-dynamic-module=./${dirname}"; \
    done; unset IFS \
    && eval ./configure ${configure_args} \
    && make modules \
    && cp -v objs/*.so /usr/lib/nginx/modules/

ARG luarocks_version=3.3.1
RUN set -x \
    && curl -fSL "https://luarocks.org/releases/luarocks-${luarocks_version}.tar.gz" \
    |  tar -C /usr/local/src -xzvf- \
    && ln -s /usr/local/src/luarocks-${luarocks_version} /usr/local/src/luarocks \
    && cd /usr/local/src/luarocks \
    && ./configure && make && make install

ARG lua_modules
RUN set -x \
    && ln -s /usr/include/$(uname -m)-linux-gnu /usr/include/linux-gnu \
    && IFS=","; \
    for lua_module in ${lua_modules}; do \
    unset IFS; \
    luarocks install ${lua_module}; \
    done

FROM nginx:${nginx_version}

COPY --from=build /usr/local/bin      /usr/local/bin
COPY --from=build /usr/local/include  /usr/local/include
COPY --from=build /usr/local/lib      /usr/local/lib
COPY --from=build /usr/local/etc      /usr/local/etc
COPY --from=build /usr/local/share    /usr/local/share
COPY --from=build /usr/lib/nginx/modules /usr/lib/nginx/modules
COPY --from=build /usr/local/lib/libjwt.so /usr/local/lib/libjwt.so


ENV LUAJIT_LIB=/usr/local/lib \
    LUAJIT_INC=/usr/local/include/luajit-2.1

RUN set -x \
    && apt-get update \
    && apt-get install -y --no-install-suggests \
    ca-certificates \
    curl \
    dnsutils \
    iputils-ping \
    libcurl4-openssl-dev \
    libyajl-dev \
    libxml2 \
    lua5.1-dev \
    net-tools \
    procps \
    tcpdump \
    rsync \
    unzip \
    vim-tiny \
    libmaxminddb0 \
    libbrotli1 \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* \
    && ldconfig -v \
    && ls /etc/nginx/modules/*.so | grep -v debug \
    |  xargs -I{} sh -c 'echo "load_module {};" | tee -a  /etc/nginx/modules/all.conf' \
    && sed -i -E 's|listen\s+80|&80|g' /etc/nginx/conf.d/default.conf \
    && touch /var/run/nginx.pid \
    && mkdir -p /var/cache/nginx \
    && chown -R nginx:nginx /etc/nginx /var/log/nginx /var/cache/nginx /var/run/nginx.pid

EXPOSE 8080 8443

USER nginx

WORKDIR /etc/nginx