This image serves as a standalone web/reverse proxy server, or as the base image for applications / services that use or require NGINX.
Based on Alpine Linux from my alpine-s6 image with the s6 init system overlayed in it.
The image is tagged respectively for the following architectures,
- armhf
- armv7l
- aarch64
- x86_64 (retagged as the
latest
)
non-x86_64 builds have embedded binfmt_misc support and contain the qemu-user-static binary that allows for running it also inside an x86_64 environment that has it.
Pull the image for your architecture it's already available from Docker Hub.
# make pull
docker pull woahbase/alpine-nginx:x86_64
-
Drop privileges to
alpine
whenever configured to. RespectsPUID
/PGID
. -
Binds to both http(80) and https(443). Publish whichever you need, or both with automatic SSL bump.
-
Default configs setup a static site at
/
by copying/defaults/index.html
at the webroot location/config/www/
. Mount the/config/
locally to persist modifications (or your webapps). NGINX configs are at/config/nginx
, and vhosts at/config/nginx/site-confs/
. For JSON indexable storage mount the data partition at/storage/
. -
4096bit Self-signed SSL certificate is generated in first run at
/config/keys
. Pass the runtime variableSSLSUBJECT
with a valid info string to make your own. -
.htpasswd
is generated with default credentialsadmin/insecurebydefault
at/config/keys/.htpasswd
-
Sets up a https and auth protected web location at
/secure
. -
If you're proxying multiple containers at the same host, or reverse proxying multiple hosts through the same container, you may need to add
--net=host
and/or add entries in your firewall to allow traffic.
If you want to run images for other architectures, you will need to have binfmt support configured for your machine. multiarch, has made it easy for us containing that into a docker container.
# make regbinfmt
docker run --rm --privileged multiarch/qemu-user-static:register --reset
Without the above, you can still run the image that is made for your architecture, e.g for an x86_64 machine..
Running make
starts the service.
# make
docker run --rm -it \
--name docker_nginx --hostname nginx \
-e PGID=1000 -e PUID=1000 \
-e WEBADMIN=admin
-e PASSWORD=insecurebydefault \
-c 64 -m 64m \
-p 80:80 -p 443:443 \
-v config:/config \
-v config/storage:/storage:ro
-v /etc/hosts:/etc/hosts:ro
-v /etc/localtime:/etc/localtime:ro
woahbase/alpine-nginx:x86_64
Running make shell
gets a shell inside the running container,
but does not run the init system, so that it can be done manually.
# make shell
docker run --rm -it \
--name docker_nginx --hostname nginx \
-e PGID=1000 -e PUID=1000 \
-e WEBADMIN=admin
-e PASSWORD=insecurebydefault \
-c 64 -m 64m \
-p 80:80 -p 443:443 \
-v config:/config \
-v config/storage:/storage:ro
-v /etc/hosts:/etc/hosts:ro
-v /etc/localtime:/etc/localtime:ro
--entrypoint /bin/bash \
woahbase/alpine-nginx:x86_64
Stop the container with a timeout, (defaults to 2 seconds)
# make stop
docker stop -t 2 docker_nginx
Removes the container, (always better to stop it first and -f
only when needed most)
# make rm
docker rm -f docker_nginx
Restart the container with
# make restart
docker restart docker_nginx
Get a shell inside a already running container,
# make debug
docker exec -it docker_nginx /bin/bash
set user or login as root,
# make rdebug
docker exec -u root -it docker_nginx /bin/bash
To check logs of a running container in real time
# make logs
docker logs -f docker_nginx
If you have the repository access, you can clone and build the image yourself for your own system, and can push after.
Before you clone the repo, you must have Git, GNU make, and Docker setup on the machine.
git clone https://github.com/woahbase/alpine-nginx
cd alpine-nginx
You can always skip installing make but you will have to type the whole docker commands then instead of using the sweet make targets.
You need to have binfmt_misc configured in your system to be able to build images for other architectures.
Otherwise to locally build the image for your system.
[ARCH
defaults to x86_64
, need to be explicit when building
for other architectures.]
# make ARCH=x86_64 build
# sets up binfmt if not x86_64
docker build --rm --compress --force-rm \
--no-cache=true --pull \
-f ./Dockerfile_x86_64 \
--build-arg DOCKERSRC=woahbase/alpine-s6:x86_64 \
--build-arg PGID=1000 \
--build-arg PUID=1000 \
-t woahbase/alpine-nginx:x86_64 \
.
To check if its working..
# make ARCH=x86_64 test
docker run --rm -it \
--name docker_nginx --hostname nginx \
-e PGID=1000 -e PUID=1000 \
woahbase/alpine-nginx:x86_64 \
sh -ec 'nginx -v'
And finally, if you have push access,
# make ARCH=x86_64 push
docker push woahbase/alpine-nginx:x86_64
Sources at Github. Built at Travis-CI.org (armhf / x64 builds). Images at Docker hub. Metadata at Microbadger.
Maintained by WOAHBase.