ARG IMAGE=nginxinc/nginx-unprivileged:stable-bullseye

FROM $IMAGE AS builder

ARG HTTP_SUBSTITUTIONS_VERSION='e12e965ac1837ca709709f9a26f572a54d83430e'
ARG HEADERS_MORE_VERSION='0.37'

USER root

RUN set -x \
    && apt-get update \
    && apt-get install -y --no-install-recommends \
        build-essential \
        libgd-dev \
        libgeoip-dev \
        libedit-dev \
        libxslt1-dev \
        libssl-dev \
        libpcre2-dev \
        libperl-dev \
        zlib1g-dev \
        unzip \
    && rm -rf /var/lib/apt/lists/* \
    && mkdir -p /usr/src \
    && curl \
        -o nginx.tar.gz \
        https://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz \
    && curl -L \
        -o nginx_substitutions_filter.zip \
        https://codeload.github.com/yaoweibin/ngx_http_substitutions_filter_module/zip/${HTTP_SUBSTITUTIONS_VERSION} \
    && curl -L \
        -o headers-more-nginx-module.zip \
        https://codeload.github.com/openresty/headers-more-nginx-module/zip/refs/tags/v${HEADERS_MORE_VERSION} \
    && tar -zxC /usr/src -f nginx.tar.gz \
    && unzip nginx_substitutions_filter.zip -d /usr/src \
    && unzip headers-more-nginx-module.zip -d /usr/src \
    && rm nginx.tar.gz \
    && rm nginx_substitutions_filter.zip \
    && rm headers-more-nginx-module.zip \
    && cd /usr/src/nginx-${NGINX_VERSION} \
    && set -eux \
    && eval ./configure $(nginx -V 2>&1 | sed -n -e "s/^.*configure arguments: //p") \
        --add-dynamic-module=/usr/src/ngx_http_substitutions_filter_module-${HTTP_SUBSTITUTIONS_VERSION} \
        --add-dynamic-module=/usr/src/headers-more-nginx-module-${HEADERS_MORE_VERSION} \
        --with-http_sub_module \
    && set +eux \
    && make \
    && make install



FROM $IMAGE

ARG BUILD_DATE=01.01.1970
ARG IMG_TITLE=docker-image
ARG IMAGE_VERSION=0
ARG SRC_REV=0

COPY --from=builder --chown=root:root --chmod=0644 /usr/lib/nginx/modules/ngx_http_subs_filter_module.so /usr/lib/nginx/modules/ngx_http_subs_filter_module.so
COPY --from=builder --chown=root:root --chmod=0644 /usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so /usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so
COPY --from=builder --chown=root:root --chmod=0755 /usr/sbin/nginx /usr/sbin/nginx

RUN sed -i '1iload_module /usr/lib/nginx/modules/ngx_http_subs_filter_module.so;\n' /etc/nginx/nginx.conf \
    &&  sed -i '1iload_module /usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so;\n' /etc/nginx/nginx.conf

# Redirect log output to stdout and stderr
RUN set -x \
    && sed -i 's,/var/log/nginx/error.log,/dev/stderr,' /etc/nginx/nginx.conf \
    && sed -i 's,/var/log/nginx/access.log,/dev/stdout,' /etc/nginx/nginx.conf

# Healthcheck to ping the /health endpoint
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 CMD curl --fail http://localhost:8181/health || exit 1

LABEL \
    maintainer="philip.henning@base23.de" \
    org.opencontainers.image.created="${BUILD_DATE}" \
    org.opencontainers.image.vendor="Base23 GmbH" \
    org.opencontainers.image.authors="Philip Henning | Base23 GmbH <philip.henning@base23.de>" \
    org.opencontainers.image.title="${IMG_TITLE}" \
    org.opencontainers.image.description="rootless nginx image based on nginxinc/nginx-unprivileged with subst module" \
    org.opencontainers.image.version="${IMAGE_VERSION}" \
    org.opencontainers.image.source="https://git.base23.de/base23/sso.base23.de" \
    org.opencontainers.image.revision="${SRC_REV}"