FROM xataz/alpine:3.6

LABEL Description="reverse with nginx based on alpine" \
      tags="latest mainline 1.13.5 1.13" \
      maintainer="xataz <https://github.com/xataz>" \
      build_ver="2017090601"

ARG NGINX_VER=1.13.5
ARG NGINX_GPG="B0F4253373F8F6F510D42178520A9993A1C052F8"
ARG TOR_GPG="2133BC600AB133E1D826D173FE43009C4607B1FB"
ARG BUILD_CORES
ARG NGINX_CONF="--prefix=/nginx \
                --sbin-path=/usr/local/sbin/nginx \
                --http-log-path=/nginx/log/nginx_access.log \
                --error-log-path=/nginx/log/nginx_error.log \
                --pid-path=/nginx/run/nginx.pid \
                --lock-path=/nginx/run/nginx.lock \
                --user=reverse --group=reverse \
                --with-http_ssl_module \
                --with-http_v2_module \
                --with-http_gzip_static_module \
                --with-http_stub_status_module \
                --with-threads \
                --with-pcre-jit \
                --with-ipv6 \
                --without-http_ssi_module \
                --without-http_scgi_module \
                --without-http_uwsgi_module \
                --without-http_geo_module \
                --without-http_autoindex_module \
                --without-http_split_clients_module \
                --without-http_memcached_module \
                --without-http_empty_gif_module \
                --add-module=/tmp/headers-more-nginx-module \
                --without-http_browser_module"
ARG TOR_VER=0.3.1.7

ENV UID=991 \
    GID=991 \
    EMAIL=admin@mydomain.local

RUN export BUILD_DEPS="build-base \
                    libressl-dev \
                    pcre-dev \
                    zlib-dev \
                    libc-dev \
                    wget \
                    gnupg \
                    go \
                    libevent-dev \
                    git" \
    && NB_CORES=${BUILD_CORES-$(grep -c "processor" /proc/cpuinfo)} \
    && apk add -U ${BUILD_DEPS} \
                s6 \
                su-exec \
                ca-certificates \
                curl \
                jq \
                libressl \
                pcre \
                zlib \
                libevent \
    && cd /tmp \
    && git clone https://github.com/openresty/headers-more-nginx-module --depth=1 \
    && wget http://nginx.org/download/nginx-${NGINX_VER}.tar.gz \
    && wget http://nginx.org/download/nginx-${NGINX_VER}.tar.gz.asc \
    && gpg --keyserver pgp.mit.edu --recv-keys "$NGINX_GPG" || \
       gpg --keyserver keyserver.pgp.com --recv-keys "$NGINX_GPG" || \
       gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$NGINX_GPG" \
    && gpg --batch --verify nginx-${NGINX_VER}.tar.gz.asc nginx-${NGINX_VER}.tar.gz \
    && tar xzf nginx-${NGINX_VER}.tar.gz \
    && cd /tmp/nginx-${NGINX_VER} \
    && ./configure ${NGINX_CONF} \            
    && make -j ${NB_CORES} \
    && make install \
    && mkdir -p /tmp/go/bin \
    && export GOPATH=/tmp/go \
    && export GOBIN=$GOPATH/bin \
    && git config --global http.https://gopkg.in.followRedirects true \
    && go get github.com/xenolf/lego \
    && mv /tmp/go/bin/lego /usr/local/bin/lego \
    && cd /tmp \
    && wget https://www.torproject.org/dist/tor-${TOR_VER}.tar.gz \
    && wget https://www.torproject.org/dist/tor-${TOR_VER}.tar.gz.asc \
	&& gpg --keyserver pgp.mit.edu --recv-keys "$TOR_GPG" || \
       gpg --keyserver keyserver.pgp.com --recv-keys "$TOR_GPG" || \
       gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$TOR_GPG" \
    && gpg --batch --verify tor-${TOR_VER}.tar.gz.asc tor-${TOR_VER}.tar.gz \
    && tar xzf tor-${TOR_VER}.tar.gz \
    && cd tor-${TOR_VER} \
    && ./configure  \
    && make -j ${NB_CORES} \
    && make install \
    && mv /usr/local/etc/tor/torrc.sample /usr/local/etc/tor/torrc \
    && apk del ${BUILD_DEPS} \
    && rm -rf /tmp/* /var/cache/apk/*

COPY rootfs /
RUN chmod +x /usr/local/bin/startup /etc/s6.d/*/*

EXPOSE 80 443

ENTRYPOINT ["/usr/local/bin/startup"]
CMD ["/bin/s6-svscan", "/etc/s6.d"]