Public-Dockerfiles/odc_application_dockerfile.txt

FROM erseco/alpine-php-webserver:3.20.5

ARG VERSION=
ARG WEBDIR=/var/www/html

LABEL version="${VERSION}" \
    Maintainer="H2 invent GmbH" \
    Description="Docker Image der Anwendung Open Datenschutzcenter" \
    org.opencontainers.version="${VERSION}" \
    org.opencontainers.image.title="Open Datenschutzcenter" \
    org.opencontainers.image.license="AGPLv3" \
    org.opencontainers.image.vendor="H2 invent GmbH" \
    org.opencontainers.image.authors="Andreas Holzmann <support@h2-invent.com>" \
    org.opencontainers.image.source="https://github.com/h2-invent/open-datenschutzcenter" \
    org.opencontainers.image.documentation="https://open-datenschutzcenter.de" \
    org.opencontainers.image.url="https://open-datenschutzcenter.de"

USER root
RUN apk --no-cache add \
    unzip \
    sqlite \
    php83-sqlite3 \
    php83-pdo_sqlite

RUN mkdir /etc/service/cron \
    && echo "#!/bin/sh" > /etc/service/cron/run \
    && echo "exec 2>&1 /supercronic /var/crontab" >> /etc/service/cron/run \
    && chown -R nobody:nobody /etc/service/cron \
    && chmod -R +x /etc/service/cron

RUN wget https://github.com/aptible/supercronic/releases/download/v0.2.33/supercronic-linux-amd64 -O /supercronic \
    && chmod +x /supercronic

RUN wget https://git.h2-invent.com/Public-System-Design/Public-Helperscripts/raw/branch/main/distributed_cron.sh -O /distributed_cron.sh \
    && chmod +x /distributed_cron.sh

RUN echo "# Docker Cron Jobs" > /var/crontab \
    && echo "SHELL=/bin/sh" >> /var/crontab \
    && echo "* * * * * date" >> /var/crontab \
    && echo "0 1 * * * curl https://open-datenschutzcenter.de/health/check" >> /var/crontab \
    && echo "0 9 * * 1-5 /bin/sh /distributed_cron.sh '${WEBDIR}/data/cron_log' 'php ${WEBDIR}/bin/console app:cron'" >> /var/crontab \
    && echo "" >> /var/crontab

RUN echo "#!/bin/sh" > /docker-entrypoint-init.d/01-symfony.sh \
    && echo "php ${WEBDIR}/bin/console cache:clear" >> /docker-entrypoint-init.d/01-symfony.sh \
    && echo "php ${WEBDIR}/bin/console doc:mig:mig --no-interaction" >> /docker-entrypoint-init.d/01-symfony.sh \
    && echo "php ${WEBDIR}/bin/console cache:clear" >> /docker-entrypoint-init.d/01-symfony.sh \
    && chmod +x /docker-entrypoint-init.d/01-symfony.sh

RUN wget https://github.com/H2-invent/open-datenschutzcenter/releases/download/${VERSION}/application.zip -O artifact.zip \
    && unzip artifact.zip -d ${WEBDIR} \
    && chown -R nobody ${WEBDIR}/public \
    && chown -R nobody ${WEBDIR}/var \
    && chmod -R 700 ${WEBDIR}/public \
    && chmod -R 700 ${WEBDIR}/var

RUN apk del unzip \
    && rm artifact.zip \
    && rm -r ${WEBDIR}/var/cache \
    && rm -rf /var/cache/apk/*

USER nobody

ENV nginx_root_directory=/var/www/html/public \
    upload_max_filesize=10M