Public-Dockerfiles/jitsi_admin_application_dockerfile.txt

FROM erseco/alpine-php-webserver:3.20.5

ARG VERSION=
ARG WEBDIR=/var/www/html

LABEL version="${VERSION}" \
    Maintainer="H2 invent GmbH" \
    Description="Docker Image der Anwendung Jitsi Admin" \
    org.opencontainers.version="${VERSION}" \
    org.opencontainers.image.title="Jitsi Admin" \
    org.opencontainers.image.license="AGPLv3" \
    org.opencontainers.image.vendor="H2 invent GmbH" \
    org.opencontainers.image.authors="Emanuel Holzmann <support@h2-invent.com>" \
    org.opencontainers.image.source="https://github.com/h2-invent/jitsi-admin" \
    org.opencontainers.image.documentation="https://meetling.de" \
    org.opencontainers.image.url="https://jitsi-admin.de"

USER root
RUN apk --no-cache add \
    unzip \
    sqlite \
    cronie \
    libcap \
    php83-sqlite3 \
    php83-pdo_sqlite \
    php83-ldap \
    php83-xmlwriter \
    php83-xsl \
    php83-pcntl \
    php83-posix \
    php83-sockets \
    && rm -rf /var/cache/apk/*

RUN sed -i 's/^date.timezone=.*$/date.timezone="Europe\/Berlin"/' /etc/php83/conf.d/custom.ini

#RUN mkdir /etc/service/crond \
#    && echo "#!/bin/sh -e" > /etc/service/crond/run \
#    && echo "exec 2>&1 /usr/sbin/crond -f" >> /etc/service/crond/run \
#    && chown -R nobody:nobody /etc/service/crond \
#    && chmod -R +x /etc/service/crond \

RUN chown nobody:nobody /usr/sbin/crond \
    && setcap cap_setgid=ep /usr/sbin/crond \
    && setcap cap_setuid=ep /usr/sbin/crond

RUN wget https://git.h2-invent.com/Public-System-Design/Public-Helperscripts/raw/branch/main/distributed_cron.sh -O /distributed_cron.sh \
    && chmod +x /distributed_cron.sh

RUN mkdir /etc/service/symfony_messenger \
    && echo "#!/bin/sh -e" > /etc/service/symfony_messenger/run \
    && echo "exec 2>&1 php -d memory_limit=-1 ${WEBDIR}/bin/console messenger:consume async --memory-limit=512m --env=prod" >> /etc/service/symfony_messenger/run \
    && chown -R nobody:nobody /etc/service/symfony_messenger \
    && chmod -R +x /etc/service/symfony_messenger 

RUN echo "# Docker Cron Jobs" > /etc/crontabs/nobody \
    && echo "* * * * * curl http://localhost:8080/health/check" >> /etc/crontabs/nobody \
    && echo "* * * * * /bin/sh /distributed_cron.sh '${WEBDIR}/data/cron_lock' 'php ${WEBDIR}/bin/console cron:run' >/dev/null 2>&1" >> /etc/crontabs/nobody \
    && echo "" >> /etc/crontabs/nobody \
    && rm /etc/crontabs/root \
    && chown nobody:nobody /etc/crontabs/nobody \
    && chmod +x /etc/crontabs/nobody

RUN echo "#!/bin/sh" > /docker-entrypoint-init.d/02-theme.sh \
    && echo "if [ -d "${WEBDIR}/data/theme" ]" >> /docker-entrypoint-init.d/02-theme.sh \
    && echo "then" >> /docker-entrypoint-init.d/02-theme.sh \
    && echo "  cp ${WEBDIR}/data/theme/*.json.signed ${WEBDIR}/theme/" >> /docker-entrypoint-init.d/02-theme.sh \
    && echo "  cp -r ${WEBDIR}/data/theme/public/* ${WEBDIR}/public/" >> /docker-entrypoint-init.d/02-theme.sh \
    && echo "fi" >> /docker-entrypoint-init.d/02-theme.sh \
    && chmod +x /docker-entrypoint-init.d/02-theme.sh

RUN echo "#!/bin/sh" > /docker-entrypoint-init.d/03-symfony.sh \
    && echo "php ${WEBDIR}/bin/console cache:clear" >> /docker-entrypoint-init.d/03-symfony.sh \
    && echo "php ${WEBDIR}/bin/console doc:mig:mig --no-interaction" >> /docker-entrypoint-init.d/03-symfony.sh \
    && echo "php ${WEBDIR}/bin/console cache:clear" >> /docker-entrypoint-init.d/03-symfony.sh \
    && chmod +x /docker-entrypoint-init.d/03-symfony.sh

RUN echo "#!/bin/sh" > /docker-entrypoint-init.d/04-crond.sh \
    && echo "# Start crond as daemon via entry script" >> /docker-entrypoint-init.d/04-crond.sh \
    && echo "crond -b -l 8" >> /docker-entrypoint-init.d/04-crond.sh \
    && chmod +x /docker-entrypoint-init.d/04-crond.sh

RUN wget https://github.com/H2-invent/jitsi-admin/releases/download/${VERSION}/application.zip -O artifact.zip \
    && unzip artifact.zip -d ${WEBDIR} \
    && chown -R nobody public \
    && chown -R nobody theme \
    && chown -R nobody var \
    && chmod -R 700 public \
    && chmod -R 700 theme \
    && chmod -R 700 var

RUN apk del unzip \
    && rm artifact.zip \
    && rm -r var/cache

USER nobody

ENV nginx_root_directory=/var/www/html/public \
    upload_max_filesize=10M